ArchipelProject / Archipel

XMPP Based Orchestrator
http://archipelproject.org
GNU Affero General Public License v3.0
800 stars 126 forks source link

EOF occurred in violation of protocol #1169

Closed YATV closed 8 years ago

YATV commented 8 years ago

In log after restart archipel-agent:

ERROR ::2015-11-05 19:02:02.000::utils.py:76::TNArchipelHypervisor.perform_hooks (3-srv-h@mgmt.musurit.net/3-srv-h.mgmt.domain.net)::HOOK: error when performing method create_autogroups_if_needed for hookname HOOK_ARCHIPELENTITY_PLUGIN_ALL_LOADED: [Errno 8] _ssl.c:504: EOF occurred in violation of protocol ERROR ::2015-11-05 19:02:05.221::utils.py:76::TNArchipelVirtualMachine.perform_hooks (2bef116c-8529-11e4-8b18-d8d385e1e16c@mgmt.domain.net/3-srv-h)::HOOK: error when performing method create_autogroups_if_needed for hookname HOOK_ARCHIPELENTITY_PLUGIN_ALL_LOADED: [Errno 8] _ssl.c:504: EOF occurred in violation of protocol WARNING ::2015-11-05 19:02:05.256::utils.py:74::TNArchipelHypervisor.handle_autogroup_for_entity (3-srv-h@mgmt.domain.net/3-srv-h.mgmt.domain.net)::XMPPSERVER: unable to add entity 2bef116c-8529-11e4-8b18-d8d385e1e16c@mgmt.domain.net/3-srv-h in autogroup All Virtual Machines: [Errno 8] _ssl.c:504: EOF occurred in violation of protocol ERROR ::2015-11-05 19:02:05.785::utils.py:76::TNArchipelVirtualMachine.perform_hooks (bd3644a0-6059-11e4-9785-d8d385e1e16c@mgmt.domain.net/3-srv-h)::HOOK: error when performing method create_autogroups_if_needed for hookname HOOK_ARCHIPELENTITY_PLUGIN_ALL_LOADED: [Errno 8] _ssl.c:504: EOF occurred in violation of protocol WARNING ::2015-11-05 19:02:05.807::utils.py:74::TNArchipelHypervisor.handle_autogroup_for_entity (3-srv-h@mgmt.domain.net/3-srv-h.mgmt.domain.net)::XMPPSERVER: unable to add entity bd3644a0-6059-11e4-9785-d8d385e1e16c@mgmt.domain.net/3-srv-h in autogroup All Virtual Machines: [Errno 8] _ssl.c:504: EOF occurred in violation of protocol ERROR ::2015-11-05 19:02:06.341::utils.py:76::TNArchipelVirtualMachine.perform_hooks (e317cc6a-c761-11e4-8b18-d8d385e1e16c@mgmt.domain.net/3-srv-h)::HOOK: error when performing method create_autogroups_if_needed for hookname HOOK_ARCHIPELENTITY_PLUGIN_ALL_LOADED: [Errno 8] _ssl.c:504: EOF occurred in violation of protocol WARNING ::2015-11-05 19:02:06.361::utils.py:74::TNArchipelHypervisor.handle_autogroup_for_entity (3-srv-h@mgmt.domain.net/3-srv-h.mgmt.domain.net)::XMPPSERVER: unable to add entity e317cc6a-c761-11e4-8b18-d8d385e1e16c@mgmt.domain.net/3-srv-h in autogroup All Virtual Machines: [Errno 8] _ssl.c:504: EOF occurred in violation of protocol ERROR ::2015-11-05 19:02:06.888::utils.py:76::TNArchipelVirtualMachine.perform_hooks (ff2bdbe6-5ecd-11e4-8c31-d8d385e1e16c@mgmt.domain.net/3-srv-h)::HOOK: error when performing method create_autogroups_if_needed for hookname HOOK_ARCHIPELENTITY_PLUGIN_ALL_LOADED: [Errno 8] _ssl.c:504: EOF occurred in violation of protocol WARNING ::2015-11-05 19:02:06.912::utils.py:74::TNArchipelHypervisor.handle_autogroup_for_entity (3-srv-h@mgmt.domain.net/3-srv-h.mgmt.domain.net)::XMPPSERVER: unable to add entity ff2bdbe6-5ecd-11e4-8c31-d8d385e1e16c@mgmt.domain.net/3-srv-h in autogroup All Virtual Machines: [Errno 8] _ssl.c:504: EOF occurred in violation of protocol WARNING ::2015-11-05 19:02:06.936::utils.py:74::TNArchipelHypervisor.handle_autogroup_for_entity (3-srv-h@mgmt.domain.net/3-srv-h.mgmt.domain.net)::XMPPSERVER: unable to add entity 3-srv-h@mgmt.domain.net/3-srv-h.mgmt.domain.net in autogroup All Hypervisors: [Errno 8] _ssl.c:504: EOF occurred in violation of protocol

Google say: http://stackoverflow.com/questions/19399975/python-requests-2-0-0-errno-8-ssl-c504-eof-occurred-in-violation-of-proto http://stackoverflow.com/questions/14102416/python-requests-requests-exceptions-sslerror-errno-8-ssl-c504-eof-occurred

CyrilPeponnet commented 8 years ago

How did you install the agent?

This is error is because you are using an outdated xmpp module.

On Nov 5, 2015, at 2:24 PM, Yanchuk Taras notifications@github.com wrote:

In log after restart archipel-agent:

ERROR ::2015-11-05 19:02:02.000::utils.py:76::TNArchipelHypervisor.perform_hooks (3-srv-h@mgmt.musurit.net mailto:3-srv-h@mgmt.musurit.net/3-srv-h.mgmt.domain.net)::HOOK: error when performing method create_autogroups_if_needed for hookname HOOK_ARCHIPELENTITY_PLUGIN_ALL_LOADED: [Errno 8] _ssl.c:504: EOF occurred in violation of protocol ERROR ::2015-11-05 19:02:05.221::utils.py:76::TNArchipelVirtualMachine.perform_hooks (2bef116c-8529-11e4-8b18-d8d385e1e16c@mgmt.domain.net mailto:2bef116c-8529-11e4-8b18-d8d385e1e16c@mgmt.domain.net/3-srv-h)::HOOK: error when performing method create_autogroups_if_needed for hookname HOOK_ARCHIPELENTITY_PLUGIN_ALL_LOADED: [Errno 8] _ssl.c:504: EOF occurred in violation of protocol WARNING ::2015-11-05 19:02:05.256::utils.py:74::TNArchipelHypervisor.handle_autogroup_for_entity (3-srv-h@mgmt.domain.net mailto:3-srv-h@mgmt.domain.net/3-srv-h.mgmt.domain.net)::XMPPSERVER: unable to add entity 2bef116c-8529-11e4-8b18-d8d385e1e16c@mgmt.domain.net mailto:2bef116c-8529-11e4-8b18-d8d385e1e16c@mgmt.domain.net/3-srv-h in autogroup All Virtual Machines: [Errno 8] _ssl.c:504: EOF occurred in violation of protocol ERROR ::2015-11-05 19:02:05.785::utils.py:76::TNArchipelVirtualMachine.perform_hooks (bd3644a0-6059-11e4-9785-d8d385e1e16c@mgmt.domain.net mailto:bd3644a0-6059-11e4-9785-d8d385e1e16c@mgmt.domain.net/3-srv-h)::HOOK: error when performing method create_autogroups_if_needed for hookname HOOK_ARCHIPELENTITY_PLUGIN_ALL_LOADED: [Errno 8] _ssl.c:504: EOF occurred in violation of protocol WARNING ::2015-11-05 19:02:05.807::utils.py:74::TNArchipelHypervisor.handle_autogroup_for_entity (3-srv-h@mgmt.domain.net mailto:3-srv-h@mgmt.domain.net/3-srv-h.mgmt.domain.net)::XMPPSERVER: unable to add entity bd3644a0-6059-11e4-9785-d8d385e1e16c@mgmt.domain.net mailto:bd3644a0-6059-11e4-9785-d8d385e1e16c@mgmt.domain.net/3-srv-h in autogroup All Virtual Machines: [Errno 8] _ssl.c:504: EOF occurred in violation of protocol ERROR ::2015-11-05 19:02:06.341::utils.py:76::TNArchipelVirtualMachine.perform_hooks (e317cc6a-c761-11e4-8b18-d8d385e1e16c@mgmt.domain.net mailto:e317cc6a-c761-11e4-8b18-d8d385e1e16c@mgmt.domain.net/3-srv-h)::HOOK: error when performing method create_autogroups_if_needed for hookname HOOK_ARCHIPELENTITY_PLUGIN_ALL_LOADED: [Errno 8] _ssl.c:504: EOF occurred in violation of protocol WARNING ::2015-11-05 19:02:06.361::utils.py:74::TNArchipelHypervisor.handle_autogroup_for_entity (3-srv-h@mgmt.domain.net mailto:3-srv-h@mgmt.domain.net/3-srv-h.mgmt.domain.net)::XMPPSERVER: unable to add entity e317cc6a-c761-11e4-8b18-d8d385e1e16c@mgmt.domain.net mailto:e317cc6a-c761-11e4-8b18-d8d385e1e16c@mgmt.domain.net/3-srv-h in autogroup All Virtual Machines: [Errno 8] _ssl.c:504: EOF occurred in violation of protocol ERROR ::2015-11-05 19:02:06.888::utils.py:76::TNArchipelVirtualMachine.perform_hooks (ff2bdbe6-5ecd-11e4-8c31-d8d385e1e16c@mgmt.domain.net mailto:ff2bdbe6-5ecd-11e4-8c31-d8d385e1e16c@mgmt.domain.net/3-srv-h)::HOOK: error when performing method create_autogroups_if_needed for hookname HOOK_ARCHIPELENTITY_PLUGIN_ALL_LOADED: [Errno 8] _ssl.c:504: EOF occurred in violation of protocol WARNING ::2015-11-05 19:02:06.912::utils.py:74::TNArchipelHypervisor.handle_autogroup_for_entity (3-srv-h@mgmt.domain.net mailto:3-srv-h@mgmt.domain.net/3-srv-h.mgmt.domain.net)::XMPPSERVER: unable to add entity ff2bdbe6-5ecd-11e4-8c31-d8d385e1e16c@mgmt.domain.net mailto:ff2bdbe6-5ecd-11e4-8c31-d8d385e1e16c@mgmt.domain.net/3-srv-h in autogroup All Virtual Machines: [Errno 8] _ssl.c:504: EOF occurred in violation of protocol WARNING ::2015-11-05 19:02:06.936::utils.py:74::TNArchipelHypervisor.handle_autogroup_for_entity (3-srv-h@mgmt.domain.net mailto:3-srv-h@mgmt.domain.net/3-srv-h.mgmt.domain.net)::XMPPSERVER: unable to add entity 3-srv-h@mgmt.domain.net mailto:3-srv-h@mgmt.domain.net/3-srv-h.mgmt.domain.net in autogroup All Hypervisors: [Errno 8] _ssl.c:504: EOF occurred in violation of protocol

Google say: http://stackoverflow.com/questions/19399975/python-requests-2-0-0-errno-8-ssl-c504-eof-occurred-in-violation-of-proto http://stackoverflow.com/questions/19399975/python-requests-2-0-0-errno-8-ssl-c504-eof-occurred-in-violation-of-proto http://stackoverflow.com/questions/14102416/python-requests-requests-exceptions-sslerror-errno-8-ssl-c504-eof-occurred http://stackoverflow.com/questions/14102416/python-requests-requests-exceptions-sslerror-errno-8-ssl-c504-eof-occurred — Reply to this email directly or view it on GitHub https://github.com/ArchipelProject/Archipel/issues/1169.

YATV commented 8 years ago

I installed this:

cd /root git clone https://github.com/ArchipelProject/Archipel.git cd Archipel/ ./pull.sh cd Archipel/ArchipelAgent ./buildAgent -d archipel-initinstall nano /etc/archipel/archipel.conf systemctl status archipel-agent systemctl enable archipel-agent systemctl start archipel-agent

YATV commented 8 years ago

[root@3-srv-h Archipel]# git log commit 28d4842599d6d59728d033f8f690edbd269ba157 Author: Cyril Peponnet cyril@peponnet.fr Date: Tue Oct 27 23:23:27 2015 -0700

Fix an issue with SQL requests

....

YATV commented 8 years ago

How to update xmpp module?

CyrilPeponnet commented 8 years ago

did you have any xmpp package installed ? It should come from a submodule actually.

YATV commented 8 years ago

[root@3-srv-h Archipel]# ll /usr/lib/python2.?/site-packages/ | grep xmpppy -rw-r--r--. 1 root root 155461 Oct 27 2014 xmpppy-0.5.0rc1-py2.7.egg

CyrilPeponnet commented 8 years ago

Can you remove this one? and do a git submodule in your git folder.

YATV commented 8 years ago

rm /usr/lib/python2.?/site-packages/xmpppy-0.5.0rc1-py2.7.egg

remove line with "xmpppy" in file:

nano /usr/lib/python2.?/site-packages/easy-install.pth

git submodule

288b280c6ec534c100bfee871daa3bb707467a1a ArchipelAgent/archipel-core/archipelcore/xmpp (0.5.2-5-g288b280) 007ca4c6b0ee4de80654f5e0f39fe2f0f2af2e9a ArchipelClient/Libraries/Cappuccino (v0.9.8-152-g007ca4c) 3de45e27a5504052430bbc137624532709e5eedb ArchipelClient/Libraries/GrowlCappuccino (heads/master) 0a143f54a57bc1c5d7cc473066444082ee83dff3 ArchipelClient/Libraries/LPKit (remotes/origin/integ) f6ec95902bb8d634ffd7ca155f183c5b046abc55 ArchipelClient/Libraries/StropheCappuccino (@1.0-590-gf6ec959) db188fe3201713b5acc14547d28f84b9fd3924fe ArchipelClient/Libraries/TNKit (heads/master) 911d32de49ae4174df307c8440c39e7a33cb4c80 ArchipelClient/Libraries/VNCCappuccino (911d32d)

CyrilPeponnet commented 8 years ago

Can you try again ?

YATV commented 8 years ago

systemctl restart archipel-agent

...and. The problem is not solved. The same mistakes.

CyrilPeponnet commented 8 years ago

which distro? Can you give me the settings your are using for xmpp connectivity (ejabberd c2s part and archipel.conf part).

CyrilPeponnet commented 8 years ago

if you are using a self signed cert, can you add the public key to the trusted CA on your client as well.

YATV commented 8 years ago

cert is good https://mgmt.musurit.net/ https://mgmt.musurit.net:5280/admin

YATV commented 8 years ago

ejabberd c2s

-
  port: 5222
  module: ejabberd_c2s
  ##
  ## If you installed a SSL
  ## certificate, specify the full path to the
  ## file and uncomment this line:
  ##
  certfile: "/opt/ejabberd/conf/ejabberd.pem"
  starttls: true
  max_stanza_size: 65536000
  shaper: c2s_shaper
  access: c2s
CyrilPeponnet commented 8 years ago

from client what give a openssl s_client -connect mgmt.musurit.net:5222

YATV commented 8 years ago

openssl s_client -connect mgmt.musurit.net:5222

CONNECTED(00000003) 140117658113952:error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol:s23_clnt.c:769:

no peer certificate available

No client certificate CA names sent

SSL handshake has read 7 bytes and written 249 bytes

New, (NONE), Cipher is (NONE) Secure Renegotiation IS NOT supported Compression: NONE Expansion: NONE

YATV commented 8 years ago
    # openssl s_client -connect mgmt.musurit.net:5222 -debug -starttls xmpp
    CONNECTED(00000003)
    write to 0xb05d30 [0x7ffeec744530] (121 bytes => 121 (0x79))
    0000 - 3c 73 74 72 65 61 6d 3a-73 74 72 65 61 6d 20 78   <stream:stream x
    0010 - 6d 6c 6e 73 3a 73 74 72-65 61 6d 3d 27 68 74 74   mlns:stream='htt
    0020 - 70 3a 2f 2f 65 74 68 65-72 78 2e 6a 61 62 62 65   p://etherx.jabbe
    0030 - 72 2e 6f 72 67 2f 73 74-72 65 61 6d 73 27 20 78   r.org/streams' x
    0040 - 6d 6c 6e 73 3d 27 6a 61-62 62 65 72 3a 63 6c 69   mlns='jabber:cli
    0050 - 65 6e 74 27 20 74 6f 3d-27 6d 67 6d 74 2e 6d 75   ent' to='mgmt.mu
    0060 - 73 75 72 69 74 2e 6e 65-74 27 20 76 65 72 73 69   surit.net' versi
    0070 - 6f 6e 3d 27 31 2e 30 27-3e                        on='1.0'>
    read from 0xb05d30 [0x9f8200] (8192 bytes => 173 (0xAD))
    0000 - 3c 3f 78 6d 6c 20 76 65-72 73 69 6f 6e 3d 27 31   <?xml version='1
    0010 - 2e 30 27 3f 3e 3c 73 74-72 65 61 6d 3a 73 74 72   .0'?><stream:str
    0020 - 65 61 6d 20 78 6d 6c 6e-73 3d 27 6a 61 62 62 65   eam xmlns='jabbe
    0030 - 72 3a 63 6c 69 65 6e 74-27 20 78 6d 6c 6e 73 3a   r:client' xmlns:
    0040 - 73 74 72 65 61 6d 3d 27-68 74 74 70 3a 2f 2f 65   stream='http://e
    0050 - 74 68 65 72 78 2e 6a 61-62 62 65 72 2e 6f 72 67   therx.jabber.org
    0060 - 2f 73 74 72 65 61 6d 73-27 20 69 64 3d 27 37 31   /streams' id='71
    0070 - 31 38 32 39 36 37 32 27-20 66 72 6f 6d 3d 27 6d   1829672' from='m
    0080 - 67 6d 74 2e 6d 75 73 75-72 69 74 2e 6e 65 74 27   gmt.musurit.net'
    0090 - 20 76 65 72 73 69 6f 6e-3d 27 31 2e 30 27 20 78    version='1.0' x
    00a0 - 6d 6c 3a 6c 61 6e 67 3d-27 65 6e 27 3e            ml:lang='en'>
    read from 0xb05d30 [0x9f8200] (8192 bytes => 475 (0x1DB))
    0000 - 3c 73 74 72 65 61 6d 3a-66 65 61 74 75 72 65 73   <stream:features
    0010 - 3e 3c 63 20 78 6d 6c 6e-73 3d 27 68 74 74 70 3a   ><c xmlns='http:
    0020 - 2f 2f 6a 61 62 62 65 72-2e 6f 72 67 2f 70 72 6f   //jabber.org/pro
    0030 - 74 6f 63 6f 6c 2f 63 61-70 73 27 20 68 61 73 68   tocol/caps' hash
    0040 - 3d 27 73 68 61 2d 31 27-20 6e 6f 64 65 3d 27 68   ='sha-1' node='h
    0050 - 74 74 70 3a 2f 2f 77 77-77 2e 70 72 6f 63 65 73   ttp://www.proces
    0060 - 73 2d 6f 6e 65 2e 6e 65-74 2f 65 6e 2f 65 6a 61   s-one.net/en/eja
    0070 - 62 62 65 72 64 2f 27 20-76 65 72 3d 27 41 56 66   bberd/' ver='AVf
    0080 - 78 41 48 4d 7a 4d 68 77-67 43 68 74 6c 68 6d 43   xAHMzMhwgChtlhmC
    0090 - 51 6a 6d 45 30 49 79 67-3d 27 2f 3e 3c 72 65 67   QjmE0Iyg='/><reg
    00a0 - 69 73 74 65 72 20 78 6d-6c 6e 73 3d 27 68 74 74   ister xmlns='htt
    00b0 - 70 3a 2f 2f 6a 61 62 62-65 72 2e 6f 72 67 2f 66   p://jabber.org/f
    00c0 - 65 61 74 75 72 65 73 2f-69 71 2d 72 65 67 69 73   eatures/iq-regis
    00d0 - 74 65 72 27 2f 3e 3c 73-74 61 72 74 74 6c 73 20   ter'/><starttls
    00e0 - 78 6d 6c 6e 73 3d 27 75-72 6e 3a 69 65 74 66 3a   xmlns='urn:ietf:
    00f0 - 70 61 72 61 6d 73 3a 78-6d 6c 3a 6e 73 3a 78 6d   params:xml:ns:xm
    0100 - 70 70 2d 74 6c 73 27 2f-3e 3c 6d 65 63 68 61 6e   pp-tls'/><mechan
    0110 - 69 73 6d 73 20 78 6d 6c-6e 73 3d 27 75 72 6e 3a   isms xmlns='urn:
    0120 - 69 65 74 66 3a 70 61 72-61 6d 73 3a 78 6d 6c 3a   ietf:params:xml:
    0130 - 6e 73 3a 78 6d 70 70 2d-73 61 73 6c 27 3e 3c 6d   ns:xmpp-sasl'><m
    0140 - 65 63 68 61 6e 69 73 6d-3e 50 4c 41 49 4e 3c 2f   echanism>PLAIN</
    0150 - 6d 65 63 68 61 6e 69 73-6d 3e 3c 6d 65 63 68 61   mechanism><mecha
    0160 - 6e 69 73 6d 3e 44 49 47-45 53 54 2d 4d 44 35 3c   nism>DIGEST-MD5<
    0170 - 2f 6d 65 63 68 61 6e 69-73 6d 3e 3c 6d 65 63 68   /mechanism><mech
    0180 - 61 6e 69 73 6d 3e 58 2d-4f 41 55 54 48 32 3c 2f   anism>X-OAUTH2</
    0190 - 6d 65 63 68 61 6e 69 73-6d 3e 3c 6d 65 63 68 61   mechanism><mecha
    01a0 - 6e 69 73 6d 3e 53 43 52-41 4d 2d 53 48 41 2d 31   nism>SCRAM-SHA-1
    01b0 - 3c 2f 6d 65 63 68 61 6e-69 73 6d 3e 3c 2f 6d 65   </mechanism></me
    01c0 - 63 68 61 6e 69 73 6d 73-3e 3c 2f 73 74 72 65 61   chanisms></strea
    01d0 - 6d 3a 66 65 61 74 75 72-65 73 3e                  m:features>
    write to 0xb05d30 [0x7ffeec744530] (51 bytes => 51 (0x33))
    0000 - 3c 73 74 61 72 74 74 6c-73 20 78 6d 6c 6e 73 3d   <starttls xmlns=
    0010 - 27 75 72 6e 3a 69 65 74-66 3a 70 61 72 61 6d 73   'urn:ietf:params
    0020 - 3a 78 6d 6c 3a 6e 73 3a-78 6d 70 70 2d 74 6c 73   :xml:ns:xmpp-tls
    0030 - 27 2f 3e                                          '/>
    read from 0xb05d30 [0x9f61f0] (8192 bytes => 50 (0x32))
    0000 - 3c 70 72 6f 63 65 65 64-20 78 6d 6c 6e 73 3d 27   <proceed xmlns='
    0010 - 75 72 6e 3a 69 65 74 66-3a 70 61 72 61 6d 73 3a   urn:ietf:params:
    0020 - 78 6d 6c 3a 6e 73 3a 78-6d 70 70 2d 74 6c 73 27   xml:ns:xmpp-tls'
    0030 - 2f 3e                                             />
    write to 0xb05d30 [0xb05db0] (249 bytes => 249 (0xF9))
    0000 - 16 03 01 00 f4 01 00 00-f0 03 03 56 3b bf 36 d7   ...........V;.6.
    0010 - d6 97 de 45 aa 6b fb 73-00 e5 7b a7 b3 99 0b ca   ...E.k.s..{.....
    0020 - d2 e3 89 35 df d9 f5 06-fc 17 ab 00 00 84 c0 30   ...5...........0
    0030 - c0 2c c0 28 c0 24 c0 14-c0 0a 00 a3 00 9f 00 6b   .,.(.$.........k
    0040 - 00 6a 00 39 00 38 00 88-00 87 c0 32 c0 2e c0 2a   .j.9.8.....2...*
    0050 - c0 26 c0 0f c0 05 00 9d-00 3d 00 35 00 84 c0 2f   .&.......=.5.../
    0060 - c0 2b c0 27 c0 23 c0 13-c0 09 00 a2 00 9e 00 67   .+.'.#.........g
    0070 - 00 40 00 33 00 32 c0 12-c0 08 00 9a 00 99 00 45   .@.3.2.........E
    0080 - 00 44 00 16 00 13 c0 31-c0 2d c0 29 c0 25 c0 0e   .D.....1.-.).%..
    0090 - c0 04 c0 0d c0 03 00 9c-00 3c 00 2f 00 96 00 41   .........<./...A
    00a0 - 00 0a 00 07 c0 11 c0 07-c0 0c c0 02 00 05 00 04   ................
    00b0 - 00 ff 01 00 00 43 00 0b-00 04 03 00 01 02 00 0a   .....C..........
    00c0 - 00 08 00 06 00 19 00 18-00 17 00 23 00 00 00 0d   ...........#....
    00d0 - 00 22 00 20 06 01 06 02-06 03 05 01 05 02 05 03   .". ............
    00e0 - 04 01 04 02 04 03 03 01-03 02 03 03 02 01 02 02   ................
    00f0 - 02 03 01 01 00 0f 00 01-01                        .........
    read from 0xb05d30 [0xb0b310] (7 bytes => 7 (0x7))
    0000 - 16 03 03 00 3e 02                                 ....>.
    0007 - <SPACES/NULS>
    read from 0xb05d30 [0xb0b31a] (60 bytes => 60 (0x3C))
    0000 - 00 3a 03 03 56 3b e9 09-3f 63 f4 c6 8f 32 6f e0   .:..V;..?c...2o.
    0010 - d4 c7 4b 49 78 40 c2 36-28 6e aa d6 6c 5c 28 06   ..KIx@.6(n..l\(.
    0020 - bd 0e 5a 3e 00 c0 30 00-00 12 ff 01 00 01 00 00   ..Z>..0.........
    0030 - 0b 00 04 03 00 01 02 00-0f 00 01 01               ............
    read from 0xb05d30 [0xb0b313] (5 bytes => 5 (0x5))
    0000 - 16 03 03 10 c9                                    .....
    read from 0xb05d30 [0xb0b318] (4297 bytes => 1376 (0x560))
    0000 - 0b 00 10 c5 00 10 c2 00-04 a9 30 82 04 a5 30 82   ..........0...0.
    0010 - 03 8d a0 03 02 01 02 02-10 2c e6 35 1e b0 f5 c8   .........,.5....
    0020 - b2 14 b9 3f 9d f0 02 00-71 30 0d 06 09 2a 86 48   ...?....q0...*.H
    0030 - 86 f7 0d 01 01 0b 05 00-30 55 31 0b 30 09 06 03   ........0U1.0...
    0040 - 55 04 06 13 02 43 4e 31-1a 30 18 06 03 55 04 0a   U....CN1.0...U..
    0050 - 13 11 57 6f 53 69 67 6e-20 43 41 20 4c 69 6d 69   ..WoSign CA Limi
    0060 - 74 65 64 31 2a 30 28 06-03 55 04 03 13 21 57 6f   ted1*0(..U...!Wo
    0070 - 53 69 67 6e 20 43 41 20-46 72 65 65 20 53 53 4c   Sign CA Free SSL
    0080 - 20 43 65 72 74 69 66 69-63 61 74 65 20 47 32 30    Certificate G20
    0090 - 1e 17 0d 31 35 31 30 32-38 32 30 32 36 33 38 5a   ...151028202638Z
    00a0 - 17 0d 31 36 31 30 32 38-32 30 32 36 33 38 5a 30   ..161028202638Z0
    00b0 - 1b 31 19 30 17 06 03 55-04 03 0c 10 6d 67 6d 74   .1.0...U....mgmt
    00c0 - 2e 6d 75 73 75 72 69 74-2e 6e 65 74 30 82 01 22   .musurit.net0.."
    00d0 - 30 0d 06 09 2a 86 48 86-f7 0d 01 01 01 05 00 03   0...*.H.........
    00e0 - 82 01 0f 00 30 82 01 0a-02 82 01 01 00 d2 5b 9f   ....0.........[.
    00f0 - 8e d2 87 ab 97 cc ac be-29 62 9b 03 7f 17 6b fc   ........)b....k.
    0100 - 26 c9 b8 d6 16 c1 4a f2-cd c6 ff 04 01 ff b8 4d   &.....J........M
    0110 - 83 4e fa da 45 7b 6c 00-e7 f6 f8 73 80 6e 6c 73   .N..E{l....s.nls
    0120 - 9a 0f 63 6c 09 9e 7c 6d-95 ff 5a c0 b6 52 ac c2   ..cl..|m..Z..R..
    0130 - ff c0 bd e3 20 61 11 bd-89 72 53 15 01 53 b5 b6   .... a...rS..S..
    0140 - 75 aa e5 7b bf 21 79 1c-92 c6 25 d0 b2 fd dd e7   u..{.!y...%.....
    0150 - 75 44 d4 fb 4f ec e8 ac-80 bb 82 61 59 44 69 8d   uD..O......aYDi.
    0160 - 3a fb ff b7 35 7d ad 30-7c 6c e8 8b 30 30 fe 71   :...5}.0|l..00.q
    0170 - 18 be 69 a7 11 e7 62 84-42 16 a6 ea e7 6d 7b 70   ..i...b.B....m{p
    0180 - 09 dd cd cc d7 89 7c 42-75 a5 1e 85 14 10 da 37   ......|Bu......7
    0190 - 31 ee b4 d7 d7 cb bd dd-84 d8 cd 63 22 d4 4d b9   1..........c".M.
    01a0 - df 2d 90 f9 44 6b c8 0a-51 61 3b de 6f 39 f5 17   .-..Dk..Qa;.o9..
    01b0 - b1 c1 5c 16 19 65 01 0f-05 7a 44 c2 59 b7 1f 39   ..\..e...zD.Y..9
    01c0 - 8b d3 62 96 da 28 97 92-35 c1 68 e9 cc 0a 82 dd   ..b..(..5.h.....
    01d0 - 00 c4 e0 62 80 a1 ab d1-2c d3 50 5d 31 51 cb 90   ...b....,.P]1Q..
    01e0 - cb 41 a1 e9 98 17 c0 7a-9c 74 f9 6f 77 02 03 01   .A.....z.t.ow...
    01f0 - 00 01 a3 82 01 a9 30 82-01 a5 30 0b 06 03 55 1d   ......0...0...U.
    0200 - 0f 04 04 03 02 05 a0 30-1d 06 03 55 1d 25 04 16   .......0...U.%..
    0210 - 30 14 06 08 2b 06 01 05-05 07 03 02 06 08 2b 06   0...+.........+.
    0220 - 01 05 05 07 03 01 30 09-06 03 55 1d 13 04 02 30   ......0...U....0
    0230 - 00 30 1d 06 03 55 1d 0e-04 16 04 14 23 24 8c 66   .0...U......#$.f
    0240 - 73 bd 17 a1 87 81 ea 3b-16 eb 48 ef b2 f1 33 16   s......;..H...3.
    0250 - 30 1f 06 03 55 1d 23 04-18 30 16 80 14 d2 a7 16   0...U.#..0......
    0260 - 20 7c af d9 95 9e eb 43-0a 19 f2 e0 b9 74 0e a8    |.....C.....t..
    0270 - c7 30 7d 06 08 2b 06 01-05 05 07 01 01 04 71 30   .0}..+........q0
    0280 - 6f 30 34 06 08 2b 06 01-05 05 07 30 01 86 28 68   o04..+.....0..(h
    0290 - 74 74 70 3a 2f 2f 6f 63-73 70 31 2e 77 6f 73 69   ttp://ocsp1.wosi
    02a0 - 67 6e 2e 63 6f 6d 2f 63-61 36 2f 73 65 72 76 65   gn.com/ca6/serve
    02b0 - 72 31 2f 66 72 65 65 30-37 06 08 2b 06 01 05 05   r1/free07..+....
    02c0 - 07 30 02 86 2b 68 74 74-70 3a 2f 2f 61 69 61 31   .0..+http://aia1
    02d0 - 2e 77 6f 73 69 67 6e 2e-63 6f 6d 2f 63 61 36 2e   .wosign.com/ca6.
    02e0 - 73 65 72 76 65 72 31 2e-66 72 65 65 2e 63 65 72   server1.free.cer
    02f0 - 30 3d 06 03 55 1d 1f 04-36 30 34 30 32 a0 30 a0   0=..U...60402.0.
    0300 - 2e 86 2c 68 74 74 70 3a-2f 2f 63 72 6c 73 31 2e   ..,http://crls1.
    0310 - 77 6f 73 69 67 6e 2e 63-6f 6d 2f 63 61 36 2d 73   wosign.com/ca6-s
    0320 - 65 72 76 65 72 31 2d 66-72 65 65 2e 63 72 6c 30   erver1-free.crl0
    0330 - 1b 06 03 55 1d 11 04 14-30 12 82 10 6d 67 6d 74   ...U....0...mgmt
    0340 - 2e 6d 75 73 75 72 69 74-2e 6e 65 74 30 51 06 03   .musurit.net0Q..
    0350 - 55 1d 20 04 4a 30 48 30-08 06 06 67 81 0c 01 02   U. .J0H0...g....
    0360 - 01 30 3c 06 0d 2b 06 01-04 01 82 9b 51 06 01 02   .0<..+......Q...
    0370 - 02 01 30 2b 30 29 06 08-2b 06 01 05 05 07 02 01   ..0+0)..+.......
    0380 - 16 1d 68 74 74 70 3a 2f-2f 77 77 77 2e 77 6f 73   ..http://www.wos
    0390 - 69 67 6e 2e 63 6f 6d 2f-70 6f 6c 69 63 79 2f 30   ign.com/policy/0
    03a0 - 0d 06 09 2a 86 48 86 f7-0d 01 01 0b 05 00 03 82   ...*.H..........
    03b0 - 01 01 00 6f 89 00 67 dd-b7 ab 2a 5e a5 5c 94 f8   ...o..g...*^.\..
    03c0 - 00 ee 24 94 06 9e 32 fe-4f 06 e3 d4 4e 8c 8a 67   ..$...2.O...N..g
    03d0 - f7 0b 19 c5 f6 64 ca 1c-af 72 e6 7e f0 d0 67 38   .....d...r.~..g8
    03e0 - f7 50 77 b0 74 e6 51 17-f6 f9 c9 b4 a9 62 91 13   .Pw.t.Q......b..
    03f0 - 88 58 2e bd 3d 4f cd 7b-11 b1 b3 8d a7 87 91 1e   .X..=O.{........
    0400 - 16 24 74 2e 36 cf a5 b9-6b 87 7e 32 57 8f 35 8a   .$t.6...k.~2W.5.
    0410 - 48 cb fa 88 39 f1 ad 75-18 d7 2d 11 73 7a 23 6a   H...9..u..-.sz#j
    0420 - 9d 06 f1 b6 b0 cd 2d 97-a1 e5 97 0a d6 a1 32 79   ......-.......2y
    0430 - 31 31 c1 9c 2e 00 d4 ca-cb 90 10 34 ca c0 51 d1   11.........4..Q.
    0440 - 67 ad 4c 5e 0e b9 4c 38-8f cc 9d 76 c3 c6 5e db   g.L^..L8...v..^.
    0450 - 93 2a 5c 31 2d 3b d8 77-56 db f1 c7 dd 57 f9 2e   .*\1-;.wV....W..
    0460 - cd cf bb 86 f3 73 62 0d-74 e3 5a 86 e6 a2 d0 8f   .....sb.t.Z.....
    0470 - 06 68 1a 1d 5b 05 c1 14-94 c6 1f db f7 0d 68 cc   .h..[.........h.
    0480 - 94 c6 2e 17 0f c8 c3 23-30 76 e9 88 37 a8 24 14   .......#0v..7.$.
    0490 - e7 a3 c2 9b 45 67 9b 19-d8 0f ef 75 ec 12 06 52   ....Eg.....u...R
    04a0 - a2 82 ba 46 ae af 70 96-1b d1 25 b7 bc 68 c5 05   ...F..p...%..h..
    04b0 - 3e 35 f1 00 05 b0 30 82-05 ac 30 82 03 94 a0 03   >5....0...0.....
    04c0 - 02 01 02 02 10 38 f6 45-c1 e2 5d 91 2c ce 3b 2b   .....8.E..].,.;+
    04d0 - 39 12 31 74 0d 30 0d 06-09 2a 86 48 86 f7 0d 01   9.1t.0...*.H....
    04e0 - 01 0b 05 00 30 55 31 0b-30 09 06 03 55 04 06 13   ....0U1.0...U...
    04f0 - 02 43 4e 31 1a 30 18 06-03 55 04 0a 13 11 57 6f   .CN1.0...U....Wo
    0500 - 53 69 67 6e 20 43 41 20-4c 69 6d 69 74 65 64 31   Sign CA Limited1
    0510 - 2a 30 28 06 03 55 04 03-13 21 43 65 72 74 69 66   *0(..U...!Certif
    0520 - 69 63 61 74 69 6f 6e 20-41 75 74 68 6f 72 69 74   ication Authorit
    0530 - 79 20 6f 66 20 57 6f 53-69 67 6e 30 1e 17 0d 31   y of WoSign0...1
    0540 - 34 31 31 30 38 30 30 35-38 35 38 5a 17 0d 32 39   41108005858Z..29
    0550 - 31 31 30 38 30 30 35 38-35 38 5a 30 55 31 0b 30   1108005858Z0U1.0
    read from 0xb05d30 [0xb0b878] (2921 bytes => 2921 (0xB69))
    0000 - 09 06 03 55 04 06 13 02-43 4e 31 1a 30 18 06 03   ...U....CN1.0...
    0010 - 55 04 0a 13 11 57 6f 53-69 67 6e 20 43 41 20 4c   U....WoSign CA L
    0020 - 69 6d 69 74 65 64 31 2a-30 28 06 03 55 04 03 13   imited1*0(..U...
    0030 - 21 57 6f 53 69 67 6e 20-43 41 20 46 72 65 65 20   !WoSign CA Free
    0040 - 53 53 4c 20 43 65 72 74-69 66 69 63 61 74 65 20   SSL Certificate
    0050 - 47 32 30 82 01 22 30 0d-06 09 2a 86 48 86 f7 0d   G20.."0...*.H...
    0060 - 01 01 01 05 00 03 82 01-0f 00 30 82 01 0a 02 82   ..........0.....
    0070 - 01 01 00 e3 b4 80 0e 6b-30 50 82 2f 1f e7 9d bf   .......k0P./....
    0080 - f8 7c 42 25 ed ae 61 c4-eb 86 87 23 7f 11 1f c0   .|B%..a....#....
    0090 - 93 5f 1b 92 90 1e 77 8c-bc 76 f7 fb 0a a5 d5 7d   ._....w..v.....}
    00a0 - ac dc 4b 18 d8 58 2e df-46 6b 34 0f 45 64 60 84   ..K..X..Fk4.Ed`.
    00b0 - c2 eb 9a 0e 51 d4 2a 54-51 3e 27 3b 64 68 86 6f   ....Q.*TQ>';dh.o
    00c0 - 7c 6b 00 3c 99 f6 4c a8-45 27 ad a5 cb 2b 37 ed   |k.<..L.E'...+7.
    00d0 - 59 c3 52 4c 4f de 34 9c-f2 b7 d1 fa 58 cb e5 62   Y.RLO.4.....X..b
    00e0 - 9e 55 46 5c b7 c5 8d 38-24 35 ef 97 2c 7c 65 10   .UF\...8$5..,|e.
    00f0 - 0d ef 9f 97 08 d5 e5 b3-12 7a 92 dd fe 88 0f 8f   .........z......
    0100 - a4 af bd c5 d6 36 f7 41-1b e8 59 dd 86 ff 35 bf   .....6.A..Y...5.
    0110 - ed e4 d1 a0 93 6e 51 a8-99 cb df dd be 71 88 c3   .....nQ......q..
    0120 - da b1 65 cc 7b 95 c4 66-8f be 4e 06 7f 9b 53 8c   ..e.{..f..N...S.
    0130 - 6b 3c ce 97 26 82 1f 17-30 ba 3f c8 de cc 0b a1   k<..&...0.?.....
    0140 - b4 ef 12 3d 93 cb 08 30-e7 1a 98 97 80 3a 26 84   ...=...0.....:&.
    0150 - 8f fe 73 74 95 53 0f 51-b2 aa 89 57 f4 96 40 72   ..st.S.Q...W..@r
    0160 - 13 1d e4 67 98 4e 8f c6-40 0b f5 1d 0c 45 2d e0   ...g.N..@....E-.
    0170 - d5 92 83 02 03 01 00 01-a3 82 01 76 30 82 01 72   ...........v0..r
    0180 - 30 0e 06 03 55 1d 0f 01-01 ff 04 04 03 02 01 06   0...U...........
    0190 - 30 1d 06 03 55 1d 25 04-16 30 14 06 08 2b 06 01   0...U.%..0...+..
    01a0 - 05 05 07 03 02 06 08 2b-06 01 05 05 07 03 01 30   .......+.......0
    01b0 - 12 06 03 55 1d 13 01 01-ff 04 08 30 06 01 01 ff   ...U.......0....
    01c0 - 02 01 00 30 30 06 03 55-1d 1f 04 29 30 27 30 25   ...00..U...)0'0%
    01d0 - a0 23 a0 21 86 1f 68 74-74 70 3a 2f 2f 63 72 6c   .#.!..http://crl
    01e0 - 73 31 2e 77 6f 73 69 67-6e 2e 63 6f 6d 2f 63 61   s1.wosign.com/ca
    01f0 - 31 2e 63 72 6c 30 72 06-08 2b 06 01 05 05 07 01   1.crl0r..+......
    0200 - 01 04 66 30 64 30 27 06-08 2b 06 01 05 05 07 30   ..f0d0'..+.....0
    0210 - 01 86 1b 68 74 74 70 3a-2f 2f 6f 63 73 70 31 2e   ...http://ocsp1.
    0220 - 77 6f 73 69 67 6e 2e 63-6f 6d 2f 63 61 31 30 39   wosign.com/ca109
    0230 - 06 08 2b 06 01 05 05 07-30 02 86 2d 68 74 74 70   ..+.....0..-http
    0240 - 3a 2f 2f 61 69 61 31 2e-77 6f 73 69 67 6e 2e 63   ://aia1.wosign.c
    0250 - 6f 6d 2f 63 61 31 67 32-2d 73 65 72 76 65 72 31   om/ca1g2-server1
    0260 - 2d 66 72 65 65 2e 63 65-72 30 1d 06 03 55 1d 0e   -free.cer0...U..
    0270 - 04 16 04 14 d2 a7 16 20-7c af d9 95 9e eb 43 0a   ....... |.....C.
    0280 - 19 f2 e0 b9 74 0e a8 c7-30 1f 06 03 55 1d 23 04   ....t...0...U.#.
    0290 - 18 30 16 80 14 e1 66 cf-0e d1 f1 b3 4b b7 06 20   .0....f.....K..
    02a0 - 14 fe 87 12 d5 f6 fe fb-3e 30 47 06 03 55 1d 20   ........>0G..U.
    02b0 - 04 40 30 3e 30 3c 06 0d-2b 06 01 04 01 82 9b 51   .@0>0<..+......Q
    02c0 - 06 01 02 02 01 30 2b 30-29 06 08 2b 06 01 05 05   .....0+0)..+....
    02d0 - 07 02 01 16 1d 68 74 74-70 3a 2f 2f 77 77 77 2e   .....http://www.
    02e0 - 77 6f 73 69 67 6e 2e 63-6f 6d 2f 70 6f 6c 69 63   wosign.com/polic
    02f0 - 79 2f 30 0d 06 09 2a 86-48 86 f7 0d 01 01 0b 05   y/0...*.H.......
    0300 - 00 03 82 02 01 00 96 5a-df 96 91 17 68 90 5d 2f   .......Z....h.]/
    0310 - b4 32 15 80 03 03 0b e9-1c b7 73 6c da a8 fa 94   .2........sl....
    0320 - dd dd 3e 34 2b 2e 80 93-6c fa a6 67 d3 1b 7a 82   ..>4+...l..g..z.
    0330 - 41 ce 9e ff 3f ef b2 83-6a 9e fc 32 fd 44 f3 82   A...?...j..2.D..
    0340 - 66 aa cf 44 2f b3 37 41-f0 79 12 e3 02 27 86 48   f..D/.7A.y...'.H
    0350 - 92 be cf 56 d7 cb d7 e7-1e 25 9d 41 db 0a e7 33   ...V.....%.A...3
    0360 - 12 58 ad 95 d8 9e d4 b7-95 29 ba fe ff df 80 a4   .X.......)......
    0370 - 77 5b 15 62 0f 69 f8 87-6d 74 ea 85 a2 76 5d 9f   w[.b.i..mt...v].
    0380 - 95 2e 03 bc 8a f9 8a ac-81 64 50 f2 0b 45 4b ec   .........dP..EK.
    0390 - 97 30 39 74 e5 a7 7e 16-24 62 2b 50 f1 5c d8 4f   .09t..~.$b+P.\.O
    03a0 - cd 2e a2 18 25 a3 ce f6-1f 60 dd 15 de 20 15 1b   ....%....`... ..
    03b0 - 0e 7f af 85 d9 40 ac 07-2a 34 dd 51 b0 1a a8 e6   .....@..*4.Q....
    03c0 - 0e 9f 5f db 46 70 e6 f5-d9 25 1c f0 1d e5 42 a1   .._.Fp...%....B.
    03d0 - 2d 22 9d 6e 11 c9 8d a6-65 bc 0e aa 76 73 c8 56   -".n....e...vs.V
    03e0 - 60 2f fb 3f 86 b9 a5 f5-33 ef d5 13 1f 49 4c 38   `/.?....3....IL8
    03f0 - 07 9e 59 22 5a c7 4e d9-25 24 ba 53 70 fc 63 2a   ..Y"Z.N.%$.Sp.c*
    0400 - 54 51 eb c3 4b 41 7d e4-e8 3c 2c a5 76 5a bf d9   TQ..KA}..<,.vZ..
    0410 - 4c a8 0d ae 52 6e a5 5d-98 3d 6c 90 6d 78 1f c3   L...Rn.].=l.mx..
    0420 - 70 95 86 07 3f 54 e3 ea-8a 81 64 62 9a 8f 31 af   p...?T....db..1.
    0430 - 7b 2a 7e 92 22 c3 8e cc-53 ac c7 9c 99 11 2b 48   {*~."...S.....+H
    0440 - 3f 52 71 2b 6e c0 e1 b3-0a e5 03 62 d7 89 18 28   ?Rq+n......b...(
    0450 - 4c 0a 8d 3f 0b 45 89 81-8b 88 a4 93 c2 7f 44 e5   L..?.E........D.
    0460 - 1e 5b 40 00 fc 2f cc 3b-f8 6a 79 31 fd 44 14 b6   .[@../.;.jy1.D..
    0470 - 8f 48 85 4c ab 0a 9d bb-37 0a fc 51 19 e0 fe 59   .H.L....7..Q...Y
    0480 - 6a 3b 8f 60 62 a7 07 82-af 08 66 a0 f2 da 60 02   j;.`b.....f...`.
    0490 - ea d8 34 7e 57 71 a1 b5-fe 69 d7 fb dd 5a 9c f3   ..4~Wq...i...Z..
    04a0 - ff c4 ea cd 74 fa 94 70-d3 58 92 ce af 12 e4 6e   ....t..p.X.....n
    04b0 - eb dd b8 af 1d e2 65 d4-46 ea 0b 3e e3 68 0e 0a   ......e.F..>.h..
    04c0 - 4c 27 83 50 91 06 c6 7b-f8 fa 9b 26 ed 2c 0e 67   L'.P...{...&.,.g
    04d0 - b8 6c e5 2c 98 6d 5f 7a-28 c3 84 3c 03 0d f7 e2   .l.,.m_z(..<....
    04e0 - 03 e1 94 c2 58 27 f8 4d-81 59 2f f1 7c 61 c9 57   ....X'.M.Y/.|a.W
    04f0 - 5d bd dc 9c 80 d0 64 df-7c 87 78 85 e6 94 8b 70   ].....d.|.x....p
    0500 - 8b 05 47 e4 c8 7b 00 06-60 30 82 06 5c 30 82 04   ..G..{..`0..\0..
    0510 - 44 a0 03 02 01 02 02 07-19 c2 85 30 e9 3b 36 30   D..........0.;60
    0520 - 0d 06 09 2a 86 48 86 f7-0d 01 01 0b 05 00 30 7d   ...*.H........0}
    0530 - 31 0b 30 09 06 03 55 04-06 13 02 49 4c 31 16 30   1.0...U....IL1.0
    0540 - 14 06 03 55 04 0a 13 0d-53 74 61 72 74 43 6f 6d   ...U....StartCom
    0550 - 20 4c 74 64 2e 31 2b 30-29 06 03 55 04 0b 13 22    Ltd.1+0)..U..."
    0560 - 53 65 63 75 72 65 20 44-69 67 69 74 61 6c 20 43   Secure Digital C
    0570 - 65 72 74 69 66 69 63 61-74 65 20 53 69 67 6e 69   ertificate Signi
    0580 - 6e 67 31 29 30 27 06 03-55 04 03 13 20 53 74 61   ng1)0'..U... Sta
    0590 - 72 74 43 6f 6d 20 43 65-72 74 69 66 69 63 61 74   rtCom Certificat
    05a0 - 69 6f 6e 20 41 75 74 68-6f 72 69 74 79 30 1e 17   ion Authority0..
    05b0 - 0d 30 36 30 39 31 37 32-32 34 36 33 36 5a 17 0d   .060917224636Z..
    05c0 - 31 39 31 32 33 31 32 33-35 39 35 39 5a 30 55 31   191231235959Z0U1
    05d0 - 0b 30 09 06 03 55 04 06-13 02 43 4e 31 1a 30 18   .0...U....CN1.0.
    05e0 - 06 03 55 04 0a 13 11 57-6f 53 69 67 6e 20 43 41   ..U....WoSign CA
    05f0 - 20 4c 69 6d 69 74 65 64-31 2a 30 28 06 03 55 04    Limited1*0(..U.
    0600 - 03 13 21 43 65 72 74 69-66 69 63 61 74 69 6f 6e   ..!Certification
    0610 - 20 41 75 74 68 6f 72 69-74 79 20 6f 66 20 57 6f    Authority of Wo
    0620 - 53 69 67 6e 30 82 02 22-30 0d 06 09 2a 86 48 86   Sign0.."0...*.H.
    0630 - f7 0d 01 01 01 05 00 03-82 02 0f 00 30 82 02 0a   ............0...
    0640 - 02 82 02 01 00 bd ca 8d-ac b8 91 15 56 97 7b 6b   ............V.{k
    0650 - 5c 7a c2 de 6b d9 a1 b0-c3 10 23 fa a7 a1 b2 cc   \z..k.....#.....
    0660 - 31 fa 3e d9 a6 29 6f 16-3d e0 6b f8 b8 40 5f db   1.>..)o.=.k..@_.
    0670 - 39 a8 00 7a 8b a0 4d 54-7d c2 22 78 fc 8e 09 b8   9..z..MT}."x....
    0680 - a8 85 d7 cc 95 97 4b 74-d8 9e 7e f0 00 e4 0e 89   ......Kt..~.....
    0690 - ae 49 28 44 1a 10 99 32-0f 25 88 53 a4 0d b3 0f   .I(D...2.%.S....
    06a0 - 12 08 16 0b 03 71 27 1c-7f e1 db d2 fd 67 68 c4   .....q'......gh.
    06b0 - 05 5d 0a 0e 5d 70 d7 d8-97 a0 bc 53 41 9a 91 8d   .]..]p.....SA...
    06c0 - f4 9e 36 66 7a 7e 56 c1-90 5f e6 b1 68 20 36 a4   ..6fz~V.._..h 6.
    06d0 - 8c 24 2c 2c 47 0b 59 76-66 30 b5 be de ed 8f f8   .$,,G.Yvf0......
    06e0 - 9d d3 bb 01 30 e6 f2 f3-0e e0 2c 92 80 f3 85 f9   ....0.....,.....
    06f0 - 28 8a b4 54 2e 9a ed f7-76 fc 15 68 16 eb 4a 6c   (..T....v..h..Jl
    0700 - eb 2e 12 8f d4 cf fe 0c-c7 5c 1d 0b 7e 05 32 be   .........\..~.2.
    0710 - 5e b0 09 2a 42 d5 c9 4e-90 b3 59 0d bb 7a 7e cd   ^..*B..N..Y..z~.
    0720 - d5 08 5a b4 7f d8 1c 69-11 f9 27 0f 7b 06 af 54   ..Z....i..'.{..T
    0730 - 83 18 7b e1 dd 54 7a 51-68 6e 77 fc c6 bf 52 4a   ..{..TzQhnw...RJ
    0740 - 66 46 a1 b2 67 1a bb a3-4f 77 a0 be 5d ff fc 56   fF..g...Ow..]..V
    0750 - 0b 43 72 77 90 ca 9e f9-f2 39 f5 0d a9 f4 ea d7   .Crw.....9......
    0760 - e7 b3 10 2f 30 42 37 21-cc 30 70 c9 86 98 0f cc   .../0B7!.0p.....
    0770 - 58 4d 83 bb 7d e5 1a a5-37 8d b6 ac 32 97 00 3a   XM..}...7...2..:
    0780 - 63 71 24 1e 9e 37 c4 ff-74 d4 37 c0 e2 fe 88 46   cq$..7..t.7....F
    0790 - 60 11 dd 08 3f 50 36 ab-b8 7a a4 95 62 6a 6e b0   `...?P6..z..bjn.
    07a0 - ca 6a 21 5a 69 f3 f3 fb-1d 70 39 95 f3 a7 6e a6   .j!Zi....p9...n.
    07b0 - 81 89 a1 88 c5 3b 71 ca-a3 52 ee 83 bb fd a0 77   .....;q..R.....w
    07c0 - f4 e4 6f e7 42 db 6d 4a-99 8a 34 48 bc 17 dc e4   ..o.B.mJ..4H....
    07d0 - 80 08 22 b6 f2 31 c0 3f-04 3e eb 9f 20 79 d6 b8   .."..1.?.>.. y..
    07e0 - 06 64 64 02 31 d7 a9 cd-52 fb 84 45 69 09 00 2a   .dd.1...R..Ei..*
    07f0 - dc 55 8b c4 06 46 4b c0-4a 1d 09 5b 39 28 fd a9   .U...FK.J..[9(..
    0800 - ab ce 00 f9 2e 48 4b 26-e6 30 4c a5 58 ca b4 44   .....HK&.0L.X..D
    0810 - 82 4f e7 91 1e 33 c3 b0-93 ff 11 fc 81 d2 ca 1f   .O...3..........
    0820 - 71 29 dd 76 4f 92 25 af-1d 81 b7 0f 2f 8c c3 06   q).vO.%...../...
    0830 - cc 2f 27 a3 4a e4 0e 99-ba 7c 1e 45 1f 7f aa 19   ./'.J....|.E....
    0840 - 45 96 fd fc 3d 02 03 01-00 01 a3 82 01 07 30 82   E...=.........0.
    0850 - 01 03 30 12 06 03 55 1d-13 01 01 ff 04 08 30 06   ..0...U.......0.
    0860 - 01 01 ff 02 01 02 30 0e-06 03 55 1d 0f 01 01 ff   ......0...U.....
    0870 - 04 04 03 02 01 06 30 1d-06 03 55 1d 0e 04 16 04   ......0...U.....
    0880 - 14 e1 66 cf 0e d1 f1 b3-4b b7 06 20 14 fe 87 12   ..f.....K.. ....
    0890 - d5 f6 fe fb 3e 30 1f 06-03 55 1d 23 04 18 30 16   ....>0...U.#..0.
    08a0 - 80 14 4e 0b ef 1a a4 40-5b a5 17 69 87 30 ca 34   ..N....@[..i.0.4
    08b0 - 68 43 d0 41 ae f2 30 69-06 08 2b 06 01 05 05 07   hC.A..0i..+.....
    08c0 - 01 01 04 5d 30 5b 30 27-06 08 2b 06 01 05 05 07   ...]0[0'..+.....
    08d0 - 30 01 86 1b 68 74 74 70-3a 2f 2f 6f 63 73 70 2e   0...http://ocsp.
    08e0 - 73 74 61 72 74 73 73 6c-2e 63 6f 6d 2f 63 61 30   startssl.com/ca0
    08f0 - 30 06 08 2b 06 01 05 05-07 30 02 86 24 68 74 74   0..+.....0..$htt
    0900 - 70 3a 2f 2f 61 69 61 2e-73 74 61 72 74 73 73 6c   p://aia.startssl
    0910 - 2e 63 6f 6d 2f 63 65 72-74 73 2f 63 61 2e 63 72   .com/certs/ca.cr
    0920 - 74 30 32 06 03 55 1d 1f-04 2b 30 29 30 27 a0 25   t02..U...+0)0'.%
    0930 - a0 23 86 21 68 74 74 70-3a 2f 2f 63 72 6c 2e 73   .#.!http://crl.s
    0940 - 74 61 72 74 73 73 6c 2e-63 6f 6d 2f 73 66 73 63   tartssl.com/sfsc
    0950 - 61 2e 63 72 6c 30 0d 06-09 2a 86 48 86 f7 0d 01   a.crl0...*.H....
    0960 - 01 0b 05 00 03 82 02 01-00 b6 6d f8 70 fb e2 0d   ..........m.p...
    0970 - 4c 98 b3 07 49 15 f5 04-c4 6c ca ca f5 68 a0 08   L...I....l...h..
    0980 - fe 12 6d 9c 04 06 c9 ad-9a 91 52 3e 78 c4 5c ee   ..m.......R>x.\.
    0990 - 9f 54 1d ee e3 f1 5e 30-c9 49 e1 39 e0 a6 9d 36   .T....^0.I.9...6
    09a0 - 6c 57 fa e6 34 4f 55 e8-87 a8 2c dd 05 f1 58 12   lW..4OU...,...X.
    09b0 - 91 e8 ca ce 28 78 8f df-07 85 01 a5 dc 45 96 05   ....(x.......E..
    09c0 - d4 80 b2 2b 05 9a cb 9a-a5 8b e0 3a 67 e6 73 47   ...+.......:g.sG
    09d0 - be 4a fd 27 b1 88 ef e6-ca cf 8d 0e 26 9f fa 5f   .J.'........&.._
    09e0 - 57 78 ad 6d fe ae 9b 35-08 b1 c3 ba c1 00 4a 4b   Wx.m...5......JK
    09f0 - 7d 14 bd f7 f1 d3 55 18-ac d0 33 70 88 6d c4 09   }.....U...3p.m..
    0a00 - 71 14 a6 2b 4f 88 81 e7-0b 00 37 a9 15 7d 7e d7   q..+O.....7..}~.
    0a10 - 01 96 3f 2f af 7b 62 ae-0a 4a bf 4b 39 2e 35 10   ..?/.{b..J.K9.5.
    0a20 - 8b fe 04 39 e4 3c 3a 0c-09 56 40 3a b5 f4 c2 68   ...9.<:..V@:...h
    0a30 - 0c b5 f9 52 cd ee 9d f8-98 fc 78 e7 58 47 8f 1c   ...R......x.XG..
    0a40 - 73 58 69 33 ab ff dd df-8e 24 01 77 98 19 3a b0   sXi3.....$.w..:.
    0a50 - 66 79 bc e1 08 a3 0e 4f-c1 04 b3 f3 01 c8 eb d3   fy.....O........
    0a60 - 59 1c 35 d2 93 1e 70 65-82 7f db cf fb c8 99 12   Y.5...pe........
    0a70 - 60 c3 44 6f 3a 80 4b d7-be 21 aa 14 7a 64 cb dd   `.Do:.K..!..zd..
    0a80 - 37 43 45 5b 32 2e 45 f0-d9 59 1f 6b 18 f0 7c e9   7CE[2.E..Y.k..|.
    0a90 - 55 36 19 61 5f b5 7d f1-8d bd 88 e4 75 4b 98 dd   U6.a_.}.....uK..
    0aa0 - 27 b0 e4 84 44 2a 61 84-57 05 82 11 1f aa 35 58   '...D*a.W.....5X
    0ab0 - f3 20 0e af 59 ef fa 55-72 72 0d 26 d0 9b 53 49   . ..Y..Urr.&..SI
    0ac0 - ac ce 37 2e 65 61 ff f6-ec 1b ea f6 f1 a6 d3 d1   ..7.ea..........
    0ad0 - b5 7b be 35 f4 22 c1 bc-8d 01 bd 68 5e 83 0d 2f   .{.5.".....h^../
    0ae0 - ec d6 da 63 0c 27 d1 54-3e e4 a8 d3 ce 4b 32 b8   ...c.'.T>....K2.
    0af0 - 91 94 ff fb 5b 49 2d 75-18 a8 ba 71 9a 3b ae d9   ....[I-u...q.;..
    0b00 - c0 a9 4f 87 91 ed 8b 7b-6b 20 98 89 39 83 4f 80   ..O....{k ..9.O.
    0b10 - c4 69 cc 17 c9 c8 4e be-e4 a9 a5 81 76 70 06 04   .i....N.....vp..
    0b20 - 32 cd 83 65 f4 bc 7d 3e-13 bc d2 e8 6f 63 aa b5   2..e..}>....oc..
    0b30 - 3b da 8d 86 32 82 78 9d-d9 cc ff bf 57 64 74 ed   ;...2.x.....Wdt.
    0b40 - 28 3d 44 62 15 61 4b f7-94 b0 0d 2a 67 1c f0 cb   (=Db.aK....*g...
    0b50 - 9b a5 92 bf f8 41 5a c1-3d 60 ed 9f bb b8 6d 9b   .....AZ.=`....m.
    0b60 - ce a9 6a 16 3f 7e ea 06-f1                        ..j.?~...
    depth=3 C = IL, O = StartCom Ltd., OU = Secure Digital Certificate Signing, CN = StartCom Certification Authority
    verify return:1
    depth=2 C = CN, O = WoSign CA Limited, CN = Certification Authority of WoSign
    verify return:1
    depth=1 C = CN, O = WoSign CA Limited, CN = WoSign CA Free SSL Certificate G2
    verify return:1
    depth=0 CN = mgmt.musurit.net
    verify return:1
    read from 0xb05d30 [0xb0b313] (5 bytes => 5 (0x5))
    0000 - 16 03 03 01 4d                                    ....M
    read from 0xb05d30 [0xb0b318] (333 bytes => 333 (0x14D))
    0000 - 0c 00 01 49 03 00 17 41-04 36 8c 86 35 4f 7f 40   ...I...A.6..5O.@
    0010 - 0f 0c 3d 9b 88 e2 b4 22-44 3b 22 d9 4a 92 18 4c   ..=...."D;".J..L
    0020 - a8 0d 7c b5 56 00 0a 7e-1e 9e d9 66 75 bb 4c 16   ..|.V..~...fu.L.
    0030 - 88 56 5d 61 e9 84 4f 95-24 5c 1c eb bb ef 0c 88   .V]a..O.$\......
    0040 - a0 15 c1 c6 44 88 27 5b-e5 06 01 01 00 2a 66 9f   ....D.'[.....*f.
    0050 - 0f bc 27 2f e0 56 6a 81-0a 3c d6 8b 33 5e 43 3d   ..'/.Vj..<..3^C=
    0060 - 77 f3 db d3 2e d5 59 81-eb 87 90 6c 84 b8 c1 46   w.....Y....l...F
    0070 - 5c a8 f6 83 32 4c 29 57-fc ce 53 47 0a d4 43 c9   \...2L)W..SG..C.
    0080 - 7e 9b fc 43 06 fd 0d 07-fc 0c d7 04 f9 47 e9 65   ~..C.........G.e
    0090 - 43 f1 27 86 10 3e 2e fc-24 4c a8 6a 94 1e 98 64   C.'..>..$L.j...d
    00a0 - 0c 09 50 1f 7b 38 81 56-2d 5c 90 14 8b bc 0b 1b   ..P.{8.V-\......
    00b0 - 0f 86 80 bc 2a cf 77 0f-d0 f6 e6 33 05 02 aa 23   ....*.w....3...#
    00c0 - 33 3a 53 de c6 a0 ef a5-fd a4 23 63 b0 6a 78 2a   3:S.......#c.jx*
    00d0 - 1c ab 62 db b5 f9 e9 77-12 42 6a 3f 84 f4 08 6c   ..b....w.Bj?...l
    00e0 - d8 b3 1e 61 25 1e 10 e3-74 e4 86 d3 d8 6b c6 f4   ...a%...t....k..
    00f0 - 1f e2 2d 51 e3 2b c3 08-9a 93 2c 8b fe a0 d3 3d   ..-Q.+....,....=
    0100 - ed 52 b9 e5 c2 46 a2 cd-03 03 f8 02 ce 3b 26 9b   .R...F.......;&.
    0110 - 1b f7 65 73 fb 1e c9 f5-78 35 fe 5d 0a d9 d0 be   ..es....x5.]....
    0120 - e4 c6 81 96 fb 29 86 32-77 81 d9 0e c7 53 2e 5c   .....).2w....S.\
    0130 - 93 a5 97 bc a3 6d 72 2d-fa a7 39 32 66 d4 e8 35   .....mr-..92f..5
    0140 - d6 11 a3 34 15 27 50 ff-e4 a7 96 a7 4c            ...4.'P.....L
    read from 0xb05d30 [0xb0b313] (5 bytes => 5 (0x5))
    0000 - 16 03 03 00 04                                    .....
    read from 0xb05d30 [0xb0b318] (4 bytes => 4 (0x4))
    0000 - 0e                                                .
    0004 - <SPACES/NULS>
    write to 0xb05d30 [0xb14f80] (75 bytes => 75 (0x4B))
    0000 - 16 03 03 00 46 10 00 00-42 41 04 d1 41 2b 7f bf   ....F...BA..A+..
    0010 - e1 9e fa 24 47 94 d3 b9-f4 c5 91 08 48 15 7d 37   ...$G.......H.}7
    0020 - f5 2f 9f 40 0a b4 61 21-e5 72 cf ac ff 48 9d e7   ./.@..a!.r...H..
    0030 - bc 42 1f 7f 63 a8 6e 5f-dc c1 4d 5a 1c 9f da 02   .B..c.n_..MZ....
    0040 - 98 76 89 fb 19 87 1c 57-eb a8 96                  .v.....W...
    write to 0xb05d30 [0xb14f80] (6 bytes => 6 (0x6))
    0000 - 14 03 03 00 01 01                                 ......
    write to 0xb05d30 [0xb14f80] (45 bytes => 45 (0x2D))
    0000 - 16 03 03 00 28 3c c8 d9-94 ec 9f d8 aa 68 62 f5   ....(<.......hb.
    0010 - 1c f6 a4 bb 89 a4 81 f1-fa 7a ad 59 b3 3b d8 18   .........z.Y.;..
    0020 - 72 86 b2 8b 5b fd c8 13-2c ca 2b 40 07            r...[...,.+@.
    read from 0xb05d30 [0xb0b313] (5 bytes => 5 (0x5))
    0000 - 14 03 03 00 01                                    .....
    read from 0xb05d30 [0xb0b318] (1 bytes => 1 (0x1))
    0000 - 01                                                .
    read from 0xb05d30 [0xb0b313] (5 bytes => 5 (0x5))
    0000 - 16 03 03 00 28                                    ....(
    read from 0xb05d30 [0xb0b318] (40 bytes => 40 (0x28))
    0000 - 27 5d 2e f1 61 e2 81 d3-3e f3 21 ac af 47 a4 eb   ']..a...>.!..G..
    0010 - 70 4c 02 bd 08 83 79 c9-85 ba c8 6a df 39 c0 99   pL....y....j.9..
    0020 - 27 c3 85 1b f9 47 3a 73-                          '....G:s
    ---
    Certificate chain
     0 s:/CN=mgmt.musurit.net
       i:/C=CN/O=WoSign CA Limited/CN=WoSign CA Free SSL Certificate G2
     1 s:/C=CN/O=WoSign CA Limited/CN=WoSign CA Free SSL Certificate G2
       i:/C=CN/O=WoSign CA Limited/CN=Certification Authority of WoSign
     2 s:/C=CN/O=WoSign CA Limited/CN=Certification Authority of WoSign
       i:/C=IL/O=StartCom Ltd./OU=Secure Digital Certificate Signing/CN=StartCom Certification Authority
    ---
    Server certificate
    -----BEGIN CERTIFICATE-----
    MIIEpTCCA42gAwIBAgIQLOY1HrD1yLIUuT+d8AIAcTANBgkqhkiG9w0BAQsFADBV
    MQswCQYDVQQGEwJDTjEaMBgGA1UEChMRV29TaWduIENBIExpbWl0ZWQxKjAoBgNV
    BAMTIVdvU2lnbiBDQSBGcmVlIFNTTCBDZXJ0aWZpY2F0ZSBHMjAeFw0xNTEwMjgy
    MDI2MzhaFw0xNjEwMjgyMDI2MzhaMBsxGTAXBgNVBAMMEG1nbXQubXVzdXJpdC5u
    ZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSW5+O0oerl8ysvili
    mwN/F2v8Jsm41hbBSvLNxv8EAf+4TYNO+tpFe2wA5/b4c4BubHOaD2NsCZ58bZX/
    WsC2UqzC/8C94yBhEb2JclMVAVO1tnWq5Xu/IXkcksYl0LL93ed1RNT7T+zorIC7
    gmFZRGmNOvv/tzV9rTB8bOiLMDD+cRi+aacR52KEQham6udte3AJ3c3M14l8QnWl
    HoUUENo3Me6019fLvd2E2M1jItRNud8tkPlEa8gKUWE73m859RexwVwWGWUBDwV6
    RMJZtx85i9Niltool5I1wWjpzAqC3QDE4GKAoavRLNNQXTFRy5DLQaHpmBfAepx0
    +W93AgMBAAGjggGpMIIBpTALBgNVHQ8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUH
    AwIGCCsGAQUFBwMBMAkGA1UdEwQCMAAwHQYDVR0OBBYEFCMkjGZzvRehh4HqOxbr
    SO+y8TMWMB8GA1UdIwQYMBaAFNKnFiB8r9mVnutDChny4Ll0DqjHMH0GCCsGAQUF
    BwEBBHEwbzA0BggrBgEFBQcwAYYoaHR0cDovL29jc3AxLndvc2lnbi5jb20vY2E2
    L3NlcnZlcjEvZnJlZTA3BggrBgEFBQcwAoYraHR0cDovL2FpYTEud29zaWduLmNv
    bS9jYTYuc2VydmVyMS5mcmVlLmNlcjA9BgNVHR8ENjA0MDKgMKAuhixodHRwOi8v
    Y3JsczEud29zaWduLmNvbS9jYTYtc2VydmVyMS1mcmVlLmNybDAbBgNVHREEFDAS
    ghBtZ210Lm11c3VyaXQubmV0MFEGA1UdIARKMEgwCAYGZ4EMAQIBMDwGDSsGAQQB
    gptRBgECAgEwKzApBggrBgEFBQcCARYdaHR0cDovL3d3dy53b3NpZ24uY29tL3Bv
    bGljeS8wDQYJKoZIhvcNAQELBQADggEBAG+JAGfdt6sqXqVclPgA7iSUBp4y/k8G
    49ROjIpn9wsZxfZkyhyvcuZ+8NBnOPdQd7B05lEX9vnJtKlikROIWC69PU/NexGx
    s42nh5EeFiR0LjbPpblrh34yV481ikjL+og58a11GNctEXN6I2qdBvG2sM0tl6Hl
    lwrWoTJ5MTHBnC4A1MrLkBA0ysBR0WetTF4OuUw4j8yddsPGXtuTKlwxLTvYd1bb
    8cfdV/kuzc+7hvNzYg1041qG5qLQjwZoGh1bBcEUlMYf2/cNaMyUxi4XD8jDIzB2
    6Yg3qCQU56PCm0VnmxnYD+917BIGUqKCukaur3CWG9Elt7xoxQU+NfE=
    -----END CERTIFICATE-----
    subject=/CN=mgmt.musurit.net
    issuer=/C=CN/O=WoSign CA Limited/CN=WoSign CA Free SSL Certificate G2
    ---
    No client certificate CA names sent
    Server Temp Key: ECDH, prime256v1, 256 bits
    ---
    SSL handshake has read 5465 bytes and written 547 bytes
    ---
    New, TLSv1/SSLv3, Cipher is ECDHE-RSA-AES256-GCM-SHA384
    Server public key is 2048 bit
    Secure Renegotiation IS supported
    Compression: NONE
    Expansion: NONE
    SSL-Session:
        Protocol  : TLSv1.2
        Cipher    : ECDHE-RSA-AES256-GCM-SHA384
        Session-ID:
        Session-ID-ctx:
        Master-Key: A6E9906A80BAB0B023AC8B3250DFC05A028B6EC9378A6B0FE73DAE00C07B52EC9F1B8489561375C36FE9935F61382418
        Key-Arg   : None
        Krb5 Principal: None
        PSK identity: None
        PSK identity hint: None
        Start Time: 1446756150
        Timeout   : 300 (sec)
        Verify return code: 0 (ok)
    ---
    read from 0xb05d30 [0xb0b313] (5 bytes => 0 (0x0))
    read:errno=0
    write to 0xb05d30 [0xb0f863] (31 bytes => 31 (0x1F))
    0000 - 15 03 03 00 1a 3c c8 d9-94 ec 9f d8 ab e9 cb 33   .....<.........3
    0010 - 1d 20 e2 24 5f cc 5e f5-7c 0a 31 bf 51 02 e9      . .$_.^.|.1.Q..
CyrilPeponnet commented 8 years ago

Hmmm looks good. Can you try with a regular xmpp client ? To see if it's server side or clident side.

YATV commented 8 years ago

Installed http://www.miranda-ng.org/en/downloads/ And connected to server without problem.

YATV commented 8 years ago
From /opt/ejabberd/logs/ejabberd.log : 

[2015-11-05 17:46:15.512 [info] <0.7.0> Application lager started on node 'ejabberd@mgmt.musurit.net'
2015-11-05 17:46:15.519 [info] <0.7.0> Application crypto started on node 'ejabberd@mgmt.musurit.net'
2015-11-05 17:46:15.529 [info] <0.7.0> Application sasl started on node 'ejabberd@mgmt.musurit.net'
2015-11-05 17:46:15.539 [info] <0.7.0> Application asn1 started on node 'ejabberd@mgmt.musurit.net'
2015-11-05 17:46:15.539 [info] <0.7.0> Application public_key started on node 'ejabberd@mgmt.musurit.net'
2015-11-05 17:46:15.548 [info] <0.7.0> Application ssl started on node 'ejabberd@mgmt.musurit.net'
2015-11-05 17:46:15.553 [info] <0.7.0> Application p1_yaml started on node 'ejabberd@mgmt.musurit.net'
2015-11-05 17:46:15.563 [info] <0.7.0> Application p1_tls started on node 'ejabberd@mgmt.musurit.net'
2015-11-05 17:46:15.569 [info] <0.7.0> Application p1_xml started on node 'ejabberd@mgmt.musurit.net'
2015-11-05 17:46:15.572 [info] <0.7.0> Application p1_stringprep started on node 'ejabberd@mgmt.musurit.net'
2015-11-05 17:46:15.576 [info] <0.7.0> Application p1_zlib started on node 'ejabberd@mgmt.musurit.net'
2015-11-05 17:46:15.579 [info] <0.7.0> Application p1_cache_tab started on node 'ejabberd@mgmt.musurit.net'
2015-11-05 17:46:16.124 [info] <0.7.0> Application mnesia started on node 'ejabberd@mgmt.musurit.net'
2015-11-05 17:46:16.956 [info] <0.7.0> Application inets started on node 'ejabberd@mgmt.musurit.net'
2015-11-05 17:46:17.354 [error] <0.37.0>@ejabberd_config:validate_opts:777 unknown option 's2s_policy' will be likely ignored

2015-11-05 17:53:53.569 [warning] <0.660.0>@ejabberd_config:get_option:729 Option {access,configure,global} has invalid (outdated?) format. This is likely a bug

2015-11-05 18:45:15.633 [warning] <0.813.0>@ejabberd_xmlrpc:build_fault_response:386 Error -118
A problem '{error,account_unprivileged}' occurred executing the command registered_users with arguments
[{host,<<"mgmt.musurit.net">>}]
2015-11-05 18:45:15.634 [warning] <0.813.0>@ejabberd_xmlrpc:build_fault_response:386 Error -118
A problem '{error,account_unprivileged}' occurred executing the command registered_users with arguments
[{host,<<"mgmt.musurit.net">>}]
2015-11-05 18:45:15.642 [warning] <0.816.0>@ejabberd_xmlrpc:build_fault_response:386 Error -118
A problem '{error,account_unprivileged}' occurred executing the command srg_list with arguments
[{host,<<"mgmt.musurit.net">>}]
2015-11-05 18:45:15.643 [warning] <0.816.0>@ejabberd_xmlrpc:build_fault_response:386 Error -118
A problem '{error,account_unprivileged}' occurred executing the command srg_list with arguments
[{host,<<"mgmt.musurit.net">>}]

From /opt/ejabberd/logs/error.log : 
2015-11-05 19:51:01.402 [error] <0.37.0>@ejabberd_config:validate_opts:777 unknown option 's2s_policy' will be likely ignored
YATV commented 8 years ago
*******************************************************************************
*                        Archipel XMPP Server Test                            *
*                                                                             *
* Archipel needs some specific parameters to be set. This tool will perform   *
* some tests in order to ensure that your ejabberd server is properly         *
* configured.                                                                 *
* If you encounter some errors during test, there are great chance that       *
* Archipel won't work correctly. If so, please read carrefully :              *
*                                                                             *
* - https://github.com/ArchipelProject/Archipel/wiki/Installation-manual      *
*                                                                             *
* Copyright 2011 Antoine Mercadal                                             *
*******************************************************************************

Type enter key to continue...

# TEST 1 : XMPP CONNECTION
 * Trying to connect to the XMPP Server using admin@mgmt.musurit.net
   [SUCCESS] : Sucessfully connected

# TEST 2 : INBAND REGISTRATION
 * Trying to register a new dummy XMPP account using in-band registration
 * Registration information sent. Wait for response...
   [SUCCESS] : Registration complete.

# TEST 3 : PUBSUB CREATION
 * Trying to create a pubsub node with the dummy account
   [SUCCESS] : Dummy pubsub created.

# TEST 4 : PUBSUB CONFIGURATION
 * Trying to configure the pubsub with required info for Archipel...
   [SUCCESS] : Pubsub sucessfully configured with correct value

# TEST 5 : PUBSUB DELETION
 * Trying to remove dummy pubsub...
   [SUCCESS] : Sucessfully deleted the pubsub.

# TEST 6 : INBAND UNREGISTRATION
 * Trying to unregister the dummy XMPP account using in-band unregistration
 * Unregistration information sent. Waiting for response...
   [SUCCESS] : Unregistration complete.

# TEST 7 : QUICK REGISTRATION/UNREGISTRATION
 * Trying to register a new dummy XMPP account using in-band registration
 * Registration information sent. Wait for response...
   [SUCCESS] : Registration complete.
 * Trying to unregister the dummy XMPP account using in-band unregistration
 * Unregistration information sent. Waiting for response...
   [SUCCESS] : Unregistration complete.

# TEST 8 : EJABBERD_XMLRPC BASIC OPERATION
 * Trying to connect the ejabberd_xmlrpc module...
   [WARNING] : Unable to authenticate on xmlrpc over http, I will try anonymously
   [WARNING] : Unable to reach xmlrpc over http, I will try over https
   [ ERROR ] : Unable to authenticate on xmlrpc over https, I will try anonymously
   [ ERROR ] : Unable to contact the ejabberd_xmlrpc module on both http or https
   [ ERROR ] : Please check the module is listenning and access rules are well configured

# TEST 9 : CHECKING FOR MOD_ADMIN_EXTRA
 * Checking is mod_admin_extra is available...
   [WARNING] : Unable to authenticate on xmlrpc over http, I will try anonymously
   [WARNING] : Unable to reach mod_admin_extra over ejabberd_xmlrpc module through http, I will try over https
   [ ERROR ] : Unable to authenticate on xmlrpc over https, I will try anonymously
   [ ERROR ] : Unable to contact the mod_admin_extra over ejabberd_xmlrpc module on both http or https
   [ ERROR ] : Please check the module is listenning and access rules are well configured

# TEST 10 : CHECKING FOR USER MANAGEMENT THROUGH XMPP API
 * Trying to list registered users using XMPP admin commands (XEP-133)
 * Command sent. Wait for response...
   [SUCCESS] : User Management is enabled

One or more has not been passed (error code is )22222222210
CyrilPeponnet commented 8 years ago

xmlrpc is not related to your issue. Could be a bug in the lib... I'm sure it was working with older release of python like 2.6 / 2.7.1. What is the python version you have?

YATV commented 8 years ago
 # python --version
Python 2.7.5
CyrilPeponnet commented 8 years ago

Oh just got it... this is related to xmlrpc as it's those calls which are falling.

CyrilPeponnet commented 8 years ago

show me your archipel.conf

YATV commented 8 years ago
# cat archipel.conf
#
# archipel.conf
#
# Copyright (C) 2010 Antoine Mercadal <antoine.mercadal@inframonde.eu>
#               2014 Cyril Peponnet <cyril@peponnet.fr>
# This program is free software: you can redistribute it and/or modify
# it under the terms of the GNU Affero General Public License as
# published by the Free Software Foundation, either version 3 of the
# License, or (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU Affero General Public License for more details.
#
# You should have received a copy of the GNU Affero General Public License
# along with this program.  If not, see <http://www.gnu.org/licenses/>.

###############################################################################
###############################################################################

#
# General configuration. You should just need to edit these values
#
[DEFAULT]

# the default XMPP server to user
xmpp_server                 = mgmt.musurit.net

# archipel's data folder
archipel_folder_lib         = /var/lib/archipel/

# this UUID will be used to identify the hypervisor
# internally. It MUST be different foreach one over
# your platform. You can generate a new one using
# uuidgen command
archipel_general_uuid       = 53831652-41b7-435e-9cf4-c4937a440e47

# the base working folder, where virtual machine related
# stuff will be stored
archipel_folder_data        = /vm/

###############################################################################
###############################################################################

#
# This is the main configuration parameters
#
[GLOBAL]

# jid of the xmpp pubsub server
xmpp_pubsub_server          = pubsub.%(xmpp_server)s

# jids of the root administrator separated with spaces
archipel_root_admins        = admin@%(xmpp_server)s

# the ip of this machine. It can be :
# - auto : the IP if found using a Internet request.
# - gateway_interface : Using ip address configured on default gateway interface
# - X.X.X.X : manual ip
machine_ip                  = 1-srv-h.mgmt.musurit.net

# if set to True, XMPP layer uses avatars
use_avatar                  = True

# Folder of the avatars
machine_avatar_directory    = %(archipel_folder_lib)s/avatars

# the uri of hypervisor
libvirt_uri                 = qemu:///system

# [OPTIONAL] if set, this parameter is send to other hypervisors as migration UI
migration_uri               = qemu+ssh://1-srv-h.mgmt.musurit.net/system

# path were modules configuration are stored (*.conf)
modules_configuration_path = /etc/archipel/modules.d/

# default loading module policy
# - permissive : if no entry are found in the conf file in section MODULES, the module will be loaded anyway
# - restrictive: you need to explicitely declare what modules to load in MODULES
module_loading_policy       = restrictive

# [OPTIONAL] This parameters makes Archipel able to run in stateless mode.
# stateless mode needs some kernel parameters. please read the documentation (which is not available now :)
# about it, or leave it set to False
stateless_node              = False

#
# VCARD information - They CANNOT be empty
#
[VCARD]
orgname     = MUSURIT SRL
orgunit     = Virtualisation
userid      = noc@musurit.com
locality    = Buenos Aires, Argentina
url         = http://musurit.com
categories  = Virtual Mashines

#
# The hypervisor configuration
#
[HYPERVISOR]

# the JID of this hypervisor. It MUST be different foreach one over
# your platform.
# If this account not exists, it will be created on the fly
hypervisor_xmpp_jid         = 1-srv-h@%(xmpp_server)s

# the XMPP password of this hypervisor
hypervisor_xmpp_password    = HUSkTgLarZWX4IhRgew43twseg

# the vCard name of hypervisor. if set to "auto"
# the hostname is used
hypervisor_name             = 1-srv-h_(KABAL)

# the sqlite3 db file to store hypervisor informations
hypervisor_database_path    = %(archipel_folder_lib)s/hypervisor.sqlite3

# the default avatar to use for hypervisor, relative to
# GLOBAL:machine_avatar_directory and if GLOBAL:use_avatar is set to True
hypervisor_default_avatar   = defaulthypervisor.png

# the file contaning auto generated names for virtual machine creation
# must be a text file containing one name per line
name_generation_file        = %(archipel_folder_lib)s/names.txt

# the database file for storing permissions (full path required)
hypervisor_permissions_database_path = %(archipel_folder_lib)s/permissions.sqlite3

#
# The virtual machines configuration
#
[VIRTUALMACHINE]

# the base folder to use to store virtual machine's own
# informations (drives, etc...)
vm_base_path                    = %(archipel_folder_data)s/drives

# [OPTIONAL] the base folder to store virtual machine permissions
# if not set, permissions are stored in the base folder
vm_perm_path                    = %(archipel_folder_data)s/drives

# the default avatar to use for virtual machine, relative to
# GLOBAL:machine_avatar_directory and if GLOBAL:use_avatar is set to True
vm_default_avatar               = defaultvm.png

# the size of the random generated XMPP password
xmpp_password_size              = 32

# the maximum lifetime of a lock (in seconds)
maximum_lock_time               = 1

# the database file for storing permissions (relative path required)
vm_permissions_database_path    = /permissions.sqlite3

# if set to false, all space in virtual machine names will be replaced by a '-'
# note that for xen backend this option has no effect as xen does'nt handle spaces in names.
allow_blank_space_in_vm_name    = True

# [OPTIONAL] this will allow to block access to block devices
# when defining virtual machines
enable_block_device_access      = True

# [OPTIONAL] this will disable the screenshot feature. Libvirt 0.9.5+ is bugged
# If you use these versions, set this value to True. Default value (i.e not set) is False
disable_screenshot              = False

#
# Logging configuration
#
[LOGGING]

# minimal log level. it can be in order:
# - debug
# - info
# - warning
# - error
# - critical
logging_level               = warning

# max life time of a log node in the pubsub
log_pubsub_item_expire      = 3600

# max number of stored log in the pubsub log node
log_pubsub_max_items        = 1000

# the path of file to store logs
logging_file_path           = /var/log/archipel/archipel.log

# max size in bytes of a log file before rotation
logging_max_bytes           = 5000000

# number of log backup file to keep
logging_backup_count        = 5

# the date format to use in log file.
# See http://docs.python.org/library/logging.html#formatter-objects
logging_date_format         = %Y-%m-%d %H:%M:%S

# the log format to use in log file.
# See http://docs.python.org/library/datetime.html?highlight=date#strftime-and-strptime-behavior
logging_formatter           = %(levelname)s::%(asctime)s.%(msecs)03d::%(filename)s:%(lineno)s::%(message)s

# If this is True, xmpppy will be in debug mode
xmpppy_debug                = False
CyrilPeponnet commented 8 years ago

and conf of xmppserver plugin in archipel-agent.d

YATV commented 8 years ago
# cat xmppserver.conf
#
# xmpperserver.conf
#
# Copyright (C) 2010 Antoine Mercadal <antoine.mercadal@inframonde.eu>
#               2014 Cyril Peponnet <cyril@peponnet.fr>
# This program is free software: you can redistribute it and/or modify
# it under the terms of the GNU Affero General Public License as
# published by the Free Software Foundation, either version 3 of the
# License, or (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU Affero General Public License for more details.
#
# You should have received a copy of the GNU Affero General Public License
# along with this program.  If not, see <http://www.gnu.org/licenses/>.

###############################################################################
###############################################################################

#
# Module activation.
#
[MODULES]
xmppserver            = True

#
# XMPP Server module configuration
#
[XMPPSERVER]

# choose the if you wan to use the XMLRPC API to manage
# Shared Roster Groups. Note that using XMLRPC
# API need to compile and install ejabberd_xmlrpc module
# If it is set to False, Shared Roster Group management will be disabled
use_xmlrpc_api      = True

# XMLRPC API ONLY: The ejabberd XMLRPC server host
xmlrpc_host         = %(xmpp_server)s

# XMLRPC API ONLY: The ejabberd XMLRPC server port
xmlrpc_port         = 4560

# XMLRPC API ONLY : Use SSL for xmlrpc, need a ssl proxy as
# xmlrpc module does'nt hanle SSL. Read more information on the wiki
xmlrpc_sslonly      = True

# [OPTIONAL] if set to True, all new virtual machines will be added automatically
# in a shared roster group named like auto_group_name
auto_group          = True

# [OPTIONAL] this is the name of the auto group if auto_group is set
# and is equal to True. auto_group_name_virtualmachines is for vms
# auto_group_name_hypervisors is for hypervisors. To put them all
# in the same group, just use the same name
auto_group_name_virtualmachines     = All Virtual Machines
auto_group_name_hypervisors         = All Hypervisors
auto_group_name_users               = All Users

# [OPTIONAL] this define what kind of entities will be automatically added
# to the auto group. Values can be "virtualmachines", "hypervisors" or "all".
# If this option is not set, "all" is the default
auto_group_filter   = all
CyrilPeponnet commented 8 years ago

Ok you can't do that:

# XMLRPC API ONLY : Use SSL for xmlrpc, need a ssl proxy as
# xmlrpc module does'nt hanle SSL. Read more information on the wiki
xmlrpc_sslonly      = True

https://github.com/ArchipelProject/Archipel/wiki/Security-concerns#safe-and-encypted-xml-rpc--xmpp

YATV commented 8 years ago

...and auto_group_filter - don't work

CyrilPeponnet commented 8 years ago

yes because it needs to use xmlrpc. And xmlrpc can't work in SSL by default you need to put a reverse proxy in front of it.

Then you also need to promote your hypervisor admin of ejabberd with archipel-ejabberdadmin command

YATV commented 8 years ago

ejabberd crashed if I uncomment line "ip : 127.0.0.1"

From /opt/ejabberd/logs/ejabberd.log

 2015-11-05 21:44:03.132 [error] <0.36.0> CRASH REPORT Process <0.36.0> with 0 neighbours exited with reason: {undefined_macro,'127.0.0.1'} in application_master:init/4 line 133
 2015-11-05 21:44:03.132 [info] <0.7.0> Application ejabberd exited with reason: {undefined_macro,'127.0.0.1'}

From /opt/ejabberd/logs/crash.log

2015-11-05 21:54:07 =CRASH REPORT====
  crasher:
    initial call: application_master:init/4
    pid: <0.36.0>
    registered_name: []
    exception exit: {{bad_return,{{ejabberd_app,start,[normal,[]]},{'EXIT',{undefined_macro,'127.0.0.1'}}}},[{application_master,init,4,[{file,"application_master.erl"},{line,133}]},{proc_lib,init_p_do_apply,3,[{file,"proc_lib.erl"},{line,237}]}]}
    ancestors: [<0.35.0>]
    messages: []
    links: [<0.35.0>,<0.37.0>,<0.7.0>]
    dictionary: []
    trap_exit: true
    status: running
    heap_size: 376
    stack_size: 27
    reductions: 132
  neighbours:
YATV commented 8 years ago

I found error in wiki (https://github.com/ArchipelProject/Archipel/wiki/Security-concerns#safe-and-encypted-xml-rpc--xmpp)

We tell ejabberd_xmlrpc to listen on localhost only in ejabberd.yaml:

listen:
    -
      ip : 127.0.0.1
      port: 4560
      module: ejabberd_xmlrpc
      access_commands:
        xmlrpcaccess:
        all : []

http://docs.ejabberd.im/admin/guide/configuration/#yaml-configuration-file-format say:

Some example values for IP address: "0.0.0.0" to listen in all IPv4 network interfaces. This is the default value when no IP is specified. "::" to listen in all IPv6 network interfaces "10.11.12.13" is the IPv4 address 10.11.12.13 "::FFFF:127.0.0.1" is the IPv6 address ::FFFF:127.0.0.1/128 The transport protocol can be tcp or udp. Default is tcp.

Correct: We tell ejabberd_xmlrpc to listen on localhost only in ejabberd.yaml:

listen:
    -
      ip : "127.0.0.1"
      port: 4560
      module: ejabberd_xmlrpc
      access_commands:
        xmlrpcaccess:
        all : []

I edited Wiki.

YATV commented 8 years ago

https://github.com/ArchipelProject/Archipel/wiki/Ejabberd:-Configuration - There is also corrected.

Also corrected the error default configuration ejabberd for Archipel. Error in file /opt/ejabberd/logs/error.log : 2015-11-05 19:51:01.402 [error] <0.37.0>@ejabberd_config:validate_opts:777 unknown option 's2s_policy' will be likely ignored

line: s2s_policy: s2s_access

change to: s2s_access: Access

http://docs.ejabberd.im/admin/guide/configuration/#yaml-configuration-file-format say: s2s_access: Access The policy for incoming and outgoing s2s connections to other XMPP servers. The default value is all.

I edited Wiki.

CyrilPeponnet commented 8 years ago

Thanks :) Actually ejabberd keep changing options and stuff and we are not up to date. What release of ejabberd are you using ?

YATV commented 8 years ago

I did as told here: https://github.com/ArchipelProject/Archipel/wiki/Security-concerns#safe-and-encypted-xml-rpc--xmpp Now this error:

    ERROR   ::2015-11-05 23:10:02.873::utils.py:76::TNArchipelHypervisor.perform_hooks (3-srv-h@mgmt.musurit.net/3-srv-h.mgmt.musurit.net)::HOOK: error when performing method create_autogroups_if_needed for hookname HOOK_ARCHIPELENTITY_PLUGIN_ALL_LOADED: <Fault -118: 'Error -118\nA problem \'{error,account_unprivileged}\' occurred executing the command srg_list with arguments\n[{host,<<"mgmt.musurit.net">>}]'>
    ERROR   ::2015-11-05 23:10:05.907::utils.py:76::TNArchipelVirtualMachine.perform_hooks (2bef116c-8529-11e4-8b18-d8d385e1e16c@mgmt.musurit.net/3-srv-h)::HOOK: error when performing method create_autogroups_if_needed for hookname HOOK_ARCHIPELENTITY_PLUGIN_ALL_LOADED: <Fault -118: 'Error -118\nA problem \'{error,account_unprivileged}\' occurred executing the command srg_list with arguments\n[{host,<<"mgmt.musurit.net">>}]'>
    WARNING ::2015-11-05 23:10:05.939::utils.py:74::TNArchipelHypervisor.handle_autogroup_for_entity (3-srv-h@mgmt.musurit.net/3-srv-h.mgmt.musurit.net)::XMPPSERVER: unable to add entity 2bef116c-8529-11e4-8b18-d8d385e1e16c@mgmt.musurit.net/3-srv-h in autogroup All Virtual Machines: <Fault -118: 'Error -118\nA problem \'{error,account_unprivileged}\' occurred executing the command srg_list with arguments\n[{host,<<"mgmt.musurit.net">>}]'>
    ERROR   ::2015-11-05 23:10:06.520::utils.py:76::TNArchipelVirtualMachine.perform_hooks (bd3644a0-6059-11e4-9785-d8d385e1e16c@mgmt.musurit.net/3-srv-h)::HOOK: error when performing method create_autogroups_if_needed for hookname HOOK_ARCHIPELENTITY_PLUGIN_ALL_LOADED: <Fault -118: 'Error -118\nA problem \'{error,account_unprivileged}\' occurred executing the command srg_list with arguments\n[{host,<<"mgmt.musurit.net">>}]'>
    WARNING ::2015-11-05 23:10:06.542::utils.py:74::TNArchipelHypervisor.handle_autogroup_for_entity (3-srv-h@mgmt.musurit.net/3-srv-h.mgmt.musurit.net)::XMPPSERVER: unable to add entity bd3644a0-6059-11e4-9785-d8d385e1e16c@mgmt.musurit.net/3-srv-h in autogroup All Virtual Machines: <Fault -118: 'Error -118\nA problem \'{error,account_unprivileged}\' occurred executing the command srg_list with arguments\n[{host,<<"mgmt.musurit.net">>}]'>
    ERROR   ::2015-11-05 23:10:07.083::utils.py:76::TNArchipelVirtualMachine.perform_hooks (e317cc6a-c761-11e4-8b18-d8d385e1e16c@mgmt.musurit.net/3-srv-h)::HOOK: error when performing method create_autogroups_if_needed for hookname HOOK_ARCHIPELENTITY_PLUGIN_ALL_LOADED: <Fault -118: 'Error -118\nA problem \'{error,account_unprivileged}\' occurred executing the command srg_list with arguments\n[{host,<<"mgmt.musurit.net">>}]'>
    WARNING ::2015-11-05 23:10:07.106::utils.py:74::TNArchipelHypervisor.handle_autogroup_for_entity (3-srv-h@mgmt.musurit.net/3-srv-h.mgmt.musurit.net)::XMPPSERVER: unable to add entity e317cc6a-c761-11e4-8b18-d8d385e1e16c@mgmt.musurit.net/3-srv-h in autogroup All Virtual Machines: <Fault -118: 'Error -118\nA problem \'{error,account_unprivileged}\' occurred executing the command srg_list with arguments\n[{host,<<"mgmt.musurit.net">>}]'>
    ERROR   ::2015-11-05 23:10:07.650::utils.py:76::TNArchipelVirtualMachine.perform_hooks (ff2bdbe6-5ecd-11e4-8c31-d8d385e1e16c@mgmt.musurit.net/3-srv-h)::HOOK: error when performing method create_autogroups_if_needed for hookname HOOK_ARCHIPELENTITY_PLUGIN_ALL_LOADED: <Fault -118: 'Error -118\nA problem \'{error,account_unprivileged}\' occurred executing the command srg_list with arguments\n[{host,<<"mgmt.musurit.net">>}]'>
    WARNING ::2015-11-05 23:10:07.677::utils.py:74::TNArchipelHypervisor.handle_autogroup_for_entity (3-srv-h@mgmt.musurit.net/3-srv-h.mgmt.musurit.net)::XMPPSERVER: unable to add entity ff2bdbe6-5ecd-11e4-8c31-d8d385e1e16c@mgmt.musurit.net/3-srv-h in autogroup All Virtual Machines: <Fault -118: 'Error -118\nA problem \'{error,account_unprivileged}\' occurred executing the command srg_list with arguments\n[{host,<<"mgmt.musurit.net">>}]'>
    WARNING ::2015-11-05 23:10:07.702::utils.py:74::TNArchipelHypervisor.handle_autogroup_for_entity (3-srv-h@mgmt.musurit.net/3-srv-h.mgmt.musurit.net)::XMPPSERVER: unable to add entity 3-srv-h@mgmt.musurit.net/3-srv-h.mgmt.musurit.net in autogroup All Hypervisors: <Fault -118: 'Error -118\nA problem \'{error,account_unprivileged}\' occurred executing the command srg_list with arguments\n[{host,<<"mgmt.musurit.net">>}]'>
YATV commented 8 years ago
# archipel-ejabberdadmin --jid=admin@mgmt.musurit.net --password=XXX -l
The following users are actually admin of mgmt.musurit.net xmpp domain :
....
-> 3-srv-h@mgmt.musurit.net
.....
CyrilPeponnet commented 8 years ago

which version of ejabbed, the latest had issue with this.

YATV commented 8 years ago
# ejabberdctl status
The node 'ejabberd@mgmt.musurit.net' is started with status: started
ejabberd 15.09 is running in that node
YATV commented 8 years ago
# tail -f  /opt/ejabberd/logs/ejabberd.log
2015-11-05 23:04:47.468 [warning] <0.648.0>@ejabberd_xmlrpc:build_fault_response:386 Error -118 A problem '{error,account_unprivileged}' occurred executing the command srg_list with arguments [{host,<<"mgmt.musurit.net">>}]
2015-11-05 23:04:50.499 [warning] <0.652.0>@ejabberd_xmlrpc:build_fault_response:386 Error -118 A problem '{error,account_unprivileged}' occurred executing the command srg_list with arguments [{host,<<"mgmt.musurit.net">>}]
2015-11-05 23:04:50.530 [warning] <0.655.0>@ejabberd_xmlrpc:build_fault_response:386 Error -118 A problem '{error,account_unprivileged}' occurred executing the command srg_list with arguments [{host,<<"mgmt.musurit.net">>}]
2015-11-05 23:04:51.113 [warning] <0.657.0>@ejabberd_xmlrpc:build_fault_response:386 Error -118 A problem '{error,account_unprivileged}' occurred executing the command srg_list with arguments [{host,<<"mgmt.musurit.net">>}]
2015-11-05 23:04:51.135 [warning] <0.660.0>@ejabberd_xmlrpc:build_fault_response:386 Error -118 A problem '{error,account_unprivileged}' occurred executing the command srg_list with arguments [{host,<<"mgmt.musurit.net">>}]
2015-11-05 23:04:51.674 [warning] <0.662.0>@ejabberd_xmlrpc:build_fault_response:386 Error -118 A problem '{error,account_unprivileged}' occurred executing the command srg_list with arguments [{host,<<"mgmt.musurit.net">>}]
2015-11-05 23:04:51.698 [warning] <0.665.0>@ejabberd_xmlrpc:build_fault_response:386 Error -118 A problem '{error,account_unprivileged}' occurred executing the command srg_list with arguments [{host,<<"mgmt.musurit.net">>}]
2015-11-05 23:04:52.242 [warning] <0.668.0>@ejabberd_xmlrpc:build_fault_response:386 Error -118 A problem '{error,account_unprivileged}' occurred executing the command srg_list with arguments [{host,<<"mgmt.musurit.net">>}]
2015-11-05 23:04:52.269 [warning] <0.671.0>@ejabberd_xmlrpc:build_fault_response:386 Error -118 A problem '{error,account_unprivileged}' occurred executing the command srg_list with arguments [{host,<<"mgmt.musurit.net">>}]
2015-11-05 23:04:52.290 [warning] <0.672.0>@ejabberd_xmlrpc:build_fault_response:386 Error -118 A problem '{error,account_unprivileged}' occurred executing the command srg_list with arguments [{host,<<"mgmt.musurit.net">>}]
CyrilPeponnet commented 8 years ago

https://github.com/processone/ejabberd/issues/771

Try with 15.10 or before 15.09

YATV commented 8 years ago

I begin to upgrade to 15.10

YATV commented 8 years ago
# ejabberdctl status
The node ejabberd@localhost is started with status: started
ejabberd 15.10 is running in that node
YATV commented 8 years ago

FIXED!!! CyrilPeponnet, great human thanks you!

People who do not use the ejabberd version 15.09!!!

CyrilPeponnet commented 8 years ago

You are welcome, glad it finally works for you. I should have see that it was related to xmlrpc... doing too much thing in the same time :)